Attack Surface Analyst 2 (Hybrid - Seattle)

Nordstrom Inc; Seattle (WA); Hybrid; USD 122,000 - 189,000; Full time

Benefits offered by this job

Medical/Vision/Dental

Retirement plan

Merchandise discount

PTO & Life Insurance

Job summary

Nordstrom Inc. seeks an Attack Surface Analyst II to identify, assess, and monitor vulnerabilities across cloud, on‑prem, and partners. The role focuses on reducing exposure and improving cyber hygiene through tooling, reporting, and process enhancements.

The candidate will lead triage of critical findings, coordinate remediation with stakeholders, and stay current with vulnerability publications and threat actor activity. Hybrid in Seattle with in-office requirements.

Qualifications

• 2+ years in security operations or related fields.
• Understanding of cloud services and multi-cloud concepts (AWS, Azure, GCP).
• Proficiency in scripting (Python, PowerShell) for automation.
• Familiarity with MITRE ATT&CK and cyber hygiene best practices.
• Ability to map attack surface and track remediation progress.

Responsibilities

• Maintain and grow attack surface management tools and reporting platforms.
• Lead triage of critical vulnerabilities with partner teams and coordinate expedited remediation.
• Research mitigations for high risk vulnerabilities and guide remediation teams.
• Engage with cybersecurity community and threat intel sources to stay current.
• Assist in mapping attack surface with network and offensive security teams.
• Track status of attack surface reduction and contribute to risk metrics.
• Suggest process/tooling changes to reduce attack surface.
• Collaborate with teams to identify asset classification and prioritization.
• Support regulatory requirements including PCI with evidence gathering.
• Contribute to Cybersecurity standards and runbooks.
• Monitor errors in automation of processes.
• Enhance cybersecurity knowledge through trainings and cross-training.

Skills

Vulnerability management

Networking

Cloud concepts

Python

PowerShell

Threat intelligence

MITRE ATT&CK

Patch management

Automation

Education

Bachelor's or Master's in IT / CS / Cybersecurity

Tools

CSPM

ASM platforms

Vulnerability scanners

Network security tools

Job description

Job Description

This role is offered as hybrid in Seattle, WA. Candidates must be available to work in office at the Nordstrom corporate headquarters a minimum of 4 days/week to be considered for this position.

Position Summary

As an Attack Surface Analyst II, you will identify, assess, prioritize and monitor vulnerabilities that pose a risk to Nordstrom’s technologies and operations. This role will support the discovery and reduction of exposures across cloud, on-prem, and third‑party environments andidentifyingopportunities to improve cyber hygiene processes to proactively reduce the attack surface.

Key Responsibilities

• Maintain and grow attack surface management tools and reporting platforms by configuring and troubleshooting vulnerability scans, developing alerts, reviewing and tuning false positives, and building reporting templates to meet customer requirements
• Lead the triage of critical vulnerability findings alongside partner teams and stakeholders to analyze the risk of emergent vulnerabilities and patch releases, coordinating expedited remediation as needed
• Research solutions andmitigationsfor highest risk vulnerabilities and provide technical guidance to remediation teams
• Engage with cybersecurity community and threat intel sources to stay current on latest vulnerability publications, zero-day exploits, and threat actor activity trends
• Assist in mapping Nordstrom's attack surface by supporting reconnaissance activities with network and offensive security teams and monitoring dark web resources for emerging exposures
• Identify and track the status of attack surface reduction efforts, by analyzing vulnerabilities and exposure, potential impact, and likelihood of exploitation, and contribute to metrics that measure attack surface risk and remediation progress
• Identify and recommend opportunities to reduce attack surface through improved processes, tooling, or architectural changes
• Collaborate with cybersecurity peers, technology partner teams and other stakeholder groups to conduct asset identification and classification, vulnerability scanning, analysis, and prioritization activities
• Support regulatory and compliance requirements including capturing evidence and artifacts related to vulnerability scanning and reporting for[e.g. PCI]
• Contribute to Cybersecurity Standards, Attack Surface Management standard operating procedures, and runbooks
• Monitor, review, and elevate errors in automation of operational processes
• Increase cybersecurity domain depth and breadth by completingtrainings, attending industry presentations, and cross‑training with peers across Cybersecurity &Privacy and Technology teams

Qualifications

• 2+ years in security operations, vulnerability management,cybersecurity, IT, or related fields
• Understanding of networking, system administration, cloud services, asset management and cyber security principles
• Working knowledge of cybersecurity tools including vulnerability identification, cloud security posture management (CSPM), attack surface / exposure managementplatforms,network security tools
• Understanding of processes and controls needed to satisfy relevantregulatory and compliancerequirements[e.g. PCI]for vulnerability and attack surface management Understanding of cloud security concepts for multi-cloud environments (AWS, Azure, GCP), Cloud Asset Exposure: AWS S3 buckets, Azure Blob storage
• Proficiency in scripting languages (Python, PowerShell) for process automation
• Working knowledge of emerging AI technologies and how they can be applied within the ASM domain
• Familiarity with cybersecurity domains and concepts including the MITRE ATT&CK framework, common attack vectors, vulnerabilities and exposures, defense-in-depth principles, network security controls, and cloud and endpoint exposure risks
• Awareness of best practices for cyber hygiene including patch management, hardening, secure configuration management, and lifecycle management
• Bachelor's or Master's degree in Information Technology, Computer Science, Cybersecurity, or a related field; equivalent experience will be considered in lieu of a degree

Pay Range Details

$121,500.00 - $188,500.00 Annual

The pay range(s) below has been provided in compliance with state specific laws. Pay ranges may be different for other locations. Pay offers are dependent on the location, as well as job-related knowledge, skills, and experience.

Benefits

We’ve got you covered… Our employees are our most important asset and that’s reflected in our benefits. Nordstrom is proud to offer a variety of benefits to support employees and their families, including:

• Medical/Vision, Dental, Retirement and Paid Time Away Life Insurance and Disability Merchandise Discount and EAP Resources
• Benefits include 401k, medical/vision/dental/life/disability insurance options, PTO accruals, Holidays, and more.
• Eligibility requirements may apply based on location, job level, classification, and length of employment.
• Learn more in the Nordstrom Benefits Overview by copying and pasting the following URL into your browser: https://careers.nordstrom.com/pdfs/Ben_Overview_16.pdf

This position may be eligible for performance-based incentives/bonuses.

Legal Notices

A few more important points... The job posting highlights the most critical responsibilities and requirements of the job. It’s not all-inclusive. There may be additional duties, responsibilities and qualifications for this job. For Los Angeles or San Francisco applicants: Nordstrom is required to inform you that we conduct background checks after conditional offer and consider qualified applicants with criminal histories in a manner consistent with legal requirements per Los Angeles, Cal. Muni. Code 189.04 and the San Francisco Fair Chance Ordinance. For additional state and location specific notices, please refer to the Legal Notices document within the FAQ section of the Nordstrom Careers site. Applicants with disabilities who require assistance or accommodation should contact the nearest Nordstrom location, which can be identified at www.nordstrom.com. Please be mindful that there may be legal notices and requirements related to this job posting that are specific to your state. Review the Career Site FAQ’s for relevant information and guidelines.

About Us

We’re a fast-moving fashion company that started as a shoe store in 1901. This heritage of service is the foundation we’re building on as we provide convenience and true connection for our customers. We empower our people to be innovative, creative and focused on providing the best service to our customers. Through it all, we remain committed to leaving the world better than we found it. Whether you’re a genius engineer, a phenomenal salesperson or a supply chain pro, we invite you to bring your unique talents and join our team. We reward great work, promote from within and celebrate diversity.

CUSTOMER OBSESSED

We strive to know our customers better than anyone else. We listen, anticipate, build trust and move with speed to deliver on their needs.

OWNERS AT HEART

We treat every interaction as an opportunity to make an impact and deliver excellence.

CURIOUS AND EVER CHANGING

We approach problems with curiosity and create solutions. We unlock potential to be bold, think big and inspire innovation.

HERE TO WIN

We’re committed to delivering results, both today and tomorrow. We win as a team by supporting and challenging one another to be better every day.

WE EXTEND OURSELVES

We treat each other with respect and kindness. We do the small things that make a big difference. We create a welcoming environment, helping people feel connected, valued and part of one community. Come on! Join us!