Cloud Security Engineer — Attack Surface Platforms

First American; Santa Ana (CA); On-site; USD 98,000 - 130,000; Full time

Benefits offered by this job

Medical benefits

401k plan

PTO

Job summary

First American is seeking a Security Engineer for Attack Surface Platforms to enhance CNAPP-based protection and visibility across our cloud environments. The role focuses on reviewing findings, validating risk, coordinating remediation, and delivering incremental platform improvements in collaboration with engineering teams.

You will monitor alerts and platform health, tune detections, and maintain runbooks while communicating clearly with stakeholders.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field.
• 2–3 years of experience in information security, cloud security, security operations or related technical roles.
• Introductory cloud or cloud security certification (e.g., AWS Cloud Practitioner, Azure Fundamentals, Google Cloud Digital Leader, CCSK).
• Ability to interpret cloud assets, identities and permissions, determine risk, and communicate remediation steps to engineering teams.
• Experience with alert triage, remediation tracking, and evidence-based closure.

Responsibilities

• Monitor CNAPP queues, dashboards, alerts, and platform health; route items to owners.
• Triage cloud misconfigurations, vulnerabilities, and permissions; assess severity and response.
• Investigate findings using configurations, logs, and metadata; document basis and remediation.
• Coordinate remediation with engineering and service teams; track progress and escalate as needed.
• Administer CNAPP capabilities including access control, onboarding, and integrations.

Skills

Cloud platforms

CNAPP concepts

Security platform troubleshooting

Scripting basics

Communication skills

Education

Bachelor's degree in Computer Science / IT / Engineering

Job description

First American is seeking a Security Engineer for Attack Surface Platforms to enhance CNAPP-based protection and visibility across our cloud environments. The role focuses on reviewing findings, validating risk, coordinating remediation, and delivering incremental platform improvements in collaboration with engineering teams.

You will monitor alerts and platform health, tune detections, and maintain runbooks while communicating clearly with stakeholders.