Senior EASM Engineer: External Attack Surface Platforms

First American; California; Remote; USD 112,000 - 150,000; Full time

Benefits offered by this job

Medical benefits

Dental & vision

401k

PTO / paid sick leave

Employee stock purchase plan

Job summary

First American is seeking a Senior Security Engineer - Attack Surface Platforms in California to lead external attack surface management efforts. You will oversee platform operations, asset discovery, exposure analysis, and remediation workflows for internet-facing assets.

You will collaborate with security and technology teams to validate findings, drive risk reduction, and develop repeatable processes and enhancements across the EASM program.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Engineering, or related field, or equivalent practical experience.
• 4-6 years of experience in information security, external attack surface management, vulnerability management, cloud security, security operations, or a related technical role.
• Hands-on EASM platform experience preferred, Cortex Xpanse experience strongly preferred.

Responsibilities

• Serve as SME for EASM platform; administer configuration, access, integrations, workflows, reporting, and health.
• Maintain reliable discovery and inventory of internet-facing assets (domains, IPs, hosts, services).
• Validate asset attribution and ownership by correlating findings with business, cloud, network, DNS, and inventory context.
• Analyze external exposures and prioritize remediation based on exposure, exploitability, business importance, and threat intel.
• Lead remediation coordination with cloud, network, infrastructure, apps, and business teams; track progress and verify closure.
• Tune platform policies and alerting to improve signal quality and reduce non-actionable findings; document rationale and results.
• Build integrations between EASM and asset inventory, ticketing, cloud security, and security ops systems.
• Develop automation and platform enhancements using APIs and scripts to improve asset review, triage, reporting, and remediation tracking.
• Produce operational reports on asset coverage, exposure trends, remediation status, and platform health.
• Lead EASM onboarding/reviews for new domains, units, cloud environments, brands, acquisitions.
• Support security investigations and incident response for externally exposed assets; preserve evidence.
• Develop runbooks and standards for EASM operations; guide users and partners on findings validation and remediation.

Skills

EASM platform

Asset discovery

Risk analysis

Cloud platforms

API scripting

Remediation ownership

Communication

Data quality

Education

Bachelor's degree in CS/IT/Engineering

Tools

Cortex Xpanse

Python

PowerShell

Bash

Ticketing systems

Job description

First American is seeking a Senior Security Engineer - Attack Surface Platforms in California to lead external attack surface management efforts. You will oversee platform operations, asset discovery, exposure analysis, and remediation workflows for internet-facing assets.

You will collaborate with security and technology teams to validate findings, drive risk reduction, and develop repeatable processes and enhancements across the EASM program.