Attack Surface Analyst II: Vulnerability Lead

Nordstrom; Seattle (WA); Hybrid; USD 122,000 - 189,000; Full time

Benefits offered by this job

Medical/Vision

Retirement plan

PTO

Merchandise discount

Job summary

Nordstrom is seeking an Attack Surface Analyst II to identify, assess, and monitor vulnerabilities across cloud and on‑prem environments. You will lead triage, coordinate rapid remediation, and align with cybersecurity teams to reduce exposure at Nordstrom headquarters in Seattle.

Join a team focused on improving cyber hygiene, applying threat intel insights, and informing risk-based decisions through robust reporting and process automation.

Qualifications

• 2+ years in security operations or related fields.
• Understanding of networking, systems, cloud services, asset management and cyber security principles.
• Familiarity with vulnerability identification and CSPM.
• Understanding of PCI/regulatory requirements for vulnerability management.
• Knowledge of multi-cloud security concepts (AWS, Azure, GCP).
• Python/PowerShell scripting for automation.
• Awareness of MITRE ATT&CK and threat intel concepts.
• Experience with patch management and secure configuration practices.

Responsibilities

• Operate and tune attack surface management tools and reports.
• Triage critical vulnerabilities with partners and coordinate remediation.
• Research mitigations for high-risk vulnerabilities and guide remediation teams.
• Monitor threat intel and vulnerability publications to stay current.
• Assist in mapping attack surface and track remediation progress.
• Propose process, tooling, or architectural changes to reduce attack surface.
• Collaborate with teams for asset identification, scanning, and prioritization.
• Support PCI and other regulatory evidence collection and reporting.

Skills

Security operations

Vulnerability management

Networking basics

Cloud security concepts

Scripting (Python/PowerShell)

MITRE ATT&CK familiarity

Threat intelligence awareness

Patch management

Automation troubleshooting

Communication skills

Education

Bachelor’s degree in IT/CS/Cybersecurity

Tools

CSPM tools

Vulnerability scanners

Network security tools

Cloud platforms (AWS/Azure/GCP)

Job description

Nordstrom is seeking an Attack Surface Analyst II to identify, assess, and monitor vulnerabilities across cloud and on‑prem environments. You will lead triage, coordinate rapid remediation, and align with cybersecurity teams to reduce exposure at Nordstrom headquarters in Seattle.

Join a team focused on improving cyber hygiene, applying threat intel insights, and informing risk-based decisions through robust reporting and process automation.