Senior Security Engineer, Attack Surface Platforms

First American

. Serve as the technical subject matter expert for the EASM platform .

Posted 10/26/2026full-timeRemote • California • United StatesSenior💰 $112,400 - $149,800 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in External Attack Surface Management (EASM) with a strong focus on asset validation, remediation coordination, and integration of security platforms. Proficient in using APIs and scripting for automation, alongside effective communication with both technical and non-technical stakeholders.

Highest-signal resume keywords

External Attack Surface Management (EASM)Cloud SecurityAPI DevelopmentVulnerability ManagementCortex Xpanse

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Asset ValidationRemediation CoordinationScripting in PythonScripting in PowerShellScripting in BashIntegration of Security PlatformsOperational ReportingRisk AnalysisPlatform ConfigurationInternet-Facing Assets Management

Soft Skills

Analytical SkillsWritten CommunicationVerbal Communication

Tools & Technologies

EASM PlatformCloud Security SystemsTicketing SystemsSecurity Operations SystemsAsset Inventory Systems

Certifications & Qualifications

Foundational Cloud CertificationCloud Security Certification

Industry Keywords

Information SecurityVulnerability ManagementNetwork ServicesDNSWeb Infrastructure

Tech Stack

Tools & technologies

CloudDNSPython

About the role

Key responsibilities & impact

Serve as the technical subject matter expert for the EASM platform
Administer platform configuration, access, integrations, workflows, reporting, and operational health
Maintain discovery and inventory of internet-facing assets
Validate asset attribution and ownership and identify unknown or unauthorized assets
Analyze external exposures and prioritize response
Lead remediation coordination across cloud, network, infrastructure, application, and business teams
Tune platform policies, risk settings, alerting, and exception workflows
Build and maintain integrations with asset inventory, ticketing, cloud security, and security operations systems
Develop automation and platform enhancements using APIs, scripts, dashboards, and workflow features
Produce operational and management reporting on asset coverage, exposure trends, remediation status, and platform health
Lead EASM onboarding and change reviews
Support security investigations and incident response involving externally exposed assets
Develop runbooks and standards and guide platform users and partner teams
Partner with Security Operations, Cloud Engineering, Network Engineering, Infrastructure, application teams, IT asset owners, Security Architecture, business stakeholders, vendors, and internal platform teams

Requirements

What you’ll need

Hands-on experience operating an external attack surface management or attack surface management platform (EASM or CTEM)
Strong understanding of internet-facing assets, network services and protocols, DNS, web infrastructure, and cloud-hosted resources
Experience validating vulnerability, exposure, and misconfiguration findings and prioritizing remediation
Working knowledge of at least one major cloud platform
Experience integrating security platforms with asset inventory, ticketing, cloud security, or security operations systems
Ability to use APIs or basic scripting in Python, PowerShell, or Bash
Ability to establish ownership and remediation paths and communicate risk to technical and nontechnical stakeholders
Strong analytical, written, and verbal communication skills
Bachelor's degree in Computer Science, Information Technology, Engineering, or related field, or equivalent practical experience
4–6 years of experience in information security, external attack surface management, vulnerability management, cloud security, security operations, or related technical role
Hands-on EASM platform experience required
At least one foundational cloud or cloud security certification required at the time of selection
Cortex Xpanse experience strongly preferred

Benefits

Comp & perks

Medical insurance
Dental insurance
Vision insurance
401(k)
PTO/paid sick leave
Employee stock purchase plan
Inclusive workplace culture
Equal opportunity employment