Attack Surface Analyst II – Hybrid Seattle

Nordstrom Inc; Seattle (WA); Hybrid; USD 122,000 - 189,000; Full time

Benefits offered by this job

Medical/Vision/Dental

Retirement plan

Merchandise discount

PTO & Life Insurance

Job summary

Nordstrom Inc. seeks an Attack Surface Analyst II to identify, assess, and monitor vulnerabilities across cloud, on‑prem, and partners. The role focuses on reducing exposure and improving cyber hygiene through tooling, reporting, and process enhancements.

The candidate will lead triage of critical findings, coordinate remediation with stakeholders, and stay current with vulnerability publications and threat actor activity. Hybrid in Seattle with in-office requirements.

Qualifications

• 2+ years in security operations or related fields.
• Understanding of cloud services and multi-cloud concepts (AWS, Azure, GCP).
• Proficiency in scripting (Python, PowerShell) for automation.
• Familiarity with MITRE ATT&CK and cyber hygiene best practices.
• Ability to map attack surface and track remediation progress.

Responsibilities

• Maintain and grow attack surface management tools and reporting platforms.
• Lead triage of critical vulnerabilities with partner teams and coordinate expedited remediation.
• Research mitigations for high risk vulnerabilities and guide remediation teams.
• Engage with cybersecurity community and threat intel sources to stay current.
• Assist in mapping attack surface with network and offensive security teams.
• Track status of attack surface reduction and contribute to risk metrics.
• Suggest process/tooling changes to reduce attack surface.
• Collaborate with teams to identify asset classification and prioritization.
• Support regulatory requirements including PCI with evidence gathering.
• Contribute to Cybersecurity standards and runbooks.
• Monitor errors in automation of processes.
• Enhance cybersecurity knowledge through trainings and cross-training.

Skills

Vulnerability management

Networking

Cloud concepts

Python

PowerShell

Threat intelligence

MITRE ATT&CK

Patch management

Automation

Education

Bachelor's or Master's in IT / CS / Cybersecurity

Tools

CSPM

ASM platforms

Vulnerability scanners

Network security tools

Job description

Nordstrom Inc. seeks an Attack Surface Analyst II to identify, assess, and monitor vulnerabilities across cloud, on‑prem, and partners. The role focuses on reducing exposure and improving cyber hygiene through tooling, reporting, and process enhancements.

The candidate will lead triage of critical findings, coordinate remediation with stakeholders, and stay current with vulnerability publications and threat actor activity. Hybrid in Seattle with in-office requirements.