Senior Security Engineer, Attack Surface Platforms

This is a fully remote position, open to applicants in California.

📋 Description

• Act as the technical expert on the EASM platform.

• Oversee platform configuration, access management, integrations, workflows, reporting, and overall operational health.

• Maintain a comprehensive discovery and inventory of internet-facing assets.

• Confirm asset attribution and ownership while identifying any unknown or unauthorized assets.

• Assess external exposures and determine response prioritization.

• Facilitate remediation efforts across cloud, network, infrastructure, application, and business teams.

• Adjust platform policies, risk settings, alerts, and exception workflows to optimize performance.

• Develop and sustain integrations with asset inventory, ticketing, cloud security, and security operations systems.

• Create automation and enhancements for the platform utilizing APIs, scripts, dashboards, and workflow features.

• Generate operational and management reports on asset coverage, exposure trends, remediation status, and platform health.

• Lead the onboarding process for EASM as well as change reviews.

• Assist with security investigations and incident responses related to externally exposed assets.

• Create runbooks and standards to guide platform users and collaborating teams.

• Collaborate with Security Operations, Cloud Engineering, Network Engineering, Infrastructure, application teams, IT asset owners, Security Architecture, business stakeholders, vendors, and internal platform teams.

⛳️ Requirements

• Practical experience in operating an external attack surface management or attack surface management platform (EASM or CTEM).

• Solid understanding of internet-facing assets, network services and protocols, DNS, web infrastructure, and cloud-hosted resources.

• Experience in validating vulnerability, exposure, and misconfiguration findings, along with prioritizing remediation efforts.

• Familiarity with at least one major cloud platform.

• Experience in integrating security platforms with asset inventory, ticketing, cloud security, or security operations systems.

• Proficiency in using APIs or basic scripting in Python, PowerShell, or Bash.

• Capability to establish ownership and remediation paths, effectively communicating risks to both technical and non-technical stakeholders.

• Strong analytical skills along with proficient written and verbal communication abilities.

• Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field, or equivalent practical experience.

• 4–6 years of experience in information security, external attack surface management, vulnerability management, cloud security, security operations, or a related technical role.

• Required hands-on experience with an EASM platform.

• At least one foundational cloud or cloud security certification is mandatory at the time of selection.

• Experience with Cortex Xpanse is highly preferred.

🏝️ Benefits

• Medical insurance.

• Dental insurance.

• Vision insurance.

• 401(k) plan.

• Paid time off/sick leave.

• Employee stock purchase plan.

• A culture that promotes inclusivity.

• Commitment to equal opportunity employment.