Security Engineer Attack Surface Platforms (Hybrid)
Core
Operates and improves the organization's cloud native application protection platform (CNAPP) and related attack surface capabilities.
Role type
Security Engineer (Cloud Security Operations)
Builds
Tested, incremental enhancements to CNAPP policies, integrations, workflows, and reporting.
Domain
Cloud Security / CNAPP
Required skills
Cloud security operations, CNAPP platform management, risk triage, cloud configuration analysis, remediation coordination, policy tuning, basic scripting (Python/PowerShell/Bash), change management
Preferred skills
Experience with multiple cloud platforms, CNAPP/CSPM/CWPP/CIEM knowledge, Infrastructure as Code, container security
Technologies
CNAPP, CSPM, CWPP, CIEM, Python, PowerShell, Bash, Cloud Platforms (AWS/Azure/GCP)
Responsibilities
Monitor CNAPP queues, dashboards, alerts, and platform health; Triage cloud misconfigurations, vulnerabilities, and exposed assets; Investigate findings by reviewing cloud configurations and logs; Coordinate remediation with engineering and service teams; Administer CNAPP capabilities including user access, integrations, and policy configuration; Improve platform coverage and signal quality by tuning policies; Build and test modest platform enhancements; Prepare operational reporting on exposure trends and remediation status; Contribute to security risk assessments and incident investigations; Maintain runbooks and knowledge articles
Seniority
Mid-level, hands-on IC