CNAPP Attack Surface Engineer

First American Title Company; Santa Ana (CA); On-site; USD 98,000 - 130,000; Full time

Job summary

First American is seeking a Security Engineer to enhance its CNAPP platform and cloud security capabilities. You will review findings, validate risk, coordinate remediation with cloud and engineering teams, and deliver tested, incremental platform improvements.

The role emphasizes collaboration, incident handling, policy configuration, and reporting. A bachelor’s degree and cloud security knowledge are expected, with certificates like CCSK or AWS/Azure fundamentals preferred.

Qualifications

• Bachelor’s degree in CS, IT, engineering, or equivalent.
• Experience with CNAPP or cloud security platform preferred.
• Strong collaboration with security and engineering teams.
• Knowledge of CNAPP concepts (CSPM, CWPP, CIEM).

Responsibilities

• Monitor CNAPP queues, dashboards, alerts, and platform health.
• Triage cloud misconfigurations, vulnerabilities, and risky assets.
• Investigate findings with cloud configurations, resources, and logs.
• Coordinate remediation with engineering and service teams.
• Administer CNAPP capabilities including access and onboarding.
• Improve policy coverage and reduce false positives.
• Prepare operational reporting on exposure trends and remediation status.
• Contribute to security risk assessments and audits.

Skills

Cloud platforms

CNAPP

CSPM

CWPP

CIEM

Vulnerability management

Container security

Security operations

Scripting (Python)

API experience

Communication skills

Education

Bachelor's degree in CS/IT/Engineering

Tools

Python

PowerShell

Bash

Infrastructure as Code

Job description

First American is seeking a Security Engineer to enhance its CNAPP platform and cloud security capabilities. You will review findings, validate risk, coordinate remediation with cloud and engineering teams, and deliver tested, incremental platform improvements.

The role emphasizes collaboration, incident handling, policy configuration, and reporting. A bachelor’s degree and cloud security knowledge are expected, with certificates like CCSK or AWS/Azure fundamentals preferred.