Senior EASM Platform Engineer - External Attack Surface

First American Financial Corporation; Sacramento (CA); Remote; USD 112,000 - 150,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

401k

PTO & sick leave

Employee stock purchase plan

Job summary

First American is seeking a Senior Security Engineer – Attack Surface Platforms to lead EASM platform operations, asset discovery, exposure analysis, and remediation workflows for internet-facing assets. You will collaborate with security and technology teams to validate findings, direct risk reduction, and improve platform quality.

Applicants should have 4–6 years in information security with hands-on EASM experience; Cortex Xpanse familiarity is preferred.

Qualifications

• Hands-on experience operating an external attack surface management platform (EASM).
• Strong understanding of internet-facing assets, DNS, and cloud services.
• Experience validating findings and prioritizing remediation with business context.
• Experience with at least one major cloud platform.
• Experience integrating security platforms with asset inventory and ticketing systems.

Responsibilities

• Serve as the technical expert for the EASM platform and manage configurations, integrations, and reporting.
• Maintain inventory of internet-facing assets and review coverage for gaps.
• Validate asset attribution and ownership across business, cloud, and network contexts.
• Analyze external exposures and prioritize remediation based on risk and business impact.
• Lead remediation coordination with cloud, network, and business teams and track progress.
• Develop runbooks and standards for EASM operations and communicate risk effectively.
• Build integrations between EASM and asset inventory, ticketing, and cloud security systems.
• Produce reporting on asset coverage, exposure trends, and remediation status.

Skills

EASM platform

Cloud platforms

APIs / scripting

Ownership & remediation

Communication skills

Education

Bachelor's degree (Comp Sci/IT/Engineering)

Tools

Cortex Xpanse

APIs / scripting (Python/PowerShell/Bash)

Job description

First American is seeking a Senior Security Engineer – Attack Surface Platforms to lead EASM platform operations, asset discovery, exposure analysis, and remediation workflows for internet-facing assets. You will collaborate with security and technology teams to validate findings, direct risk reduction, and improve platform quality.

Applicants should have 4–6 years in information security with hands-on EASM experience; Cortex Xpanse familiarity is preferred.