Attack Surface Analyst II: Vulnerability & Risk Lead

Nordstrom, Inc.; Seattle (WA); Hybrid; USD 122,000 - 189,000; Full time

Benefits offered by this job

Medical/Vision, Dental, Retirement, PA

Paid Time Away

Life Insurance and Disability

Merchandise Discount

EAP Resources

Job summary

Nordstrom, Inc. in Seattle is seeking an Attack Surface Analyst II for a hybrid role, requiring in-office presence at Nordstrom headquarters at least 4 days a week.

You will identify, assess, and monitor vulnerabilities across cloud, on-prem, and third‑party environments to reduce exposure and improve cyber hygiene. You will lead triage of critical findings, research mitigations, and collaborate with security teams to drive remediation and metrics that track attack surface risk progress and

Qualifications

• 2+ years in security operations, vulnerability management, cybersecurity, IT, or related fields.
• Understanding of networking, system administration, cloud services, asset management and cyber security principles.
• Working knowledge of cybersecurity tools including vulnerability identification, CSPM, attack surface / exposure management platforms, network security tools.
• Understanding of regulatory and compliance requirements (e.g. PCI) for vulnerability and attack surface management.
• Understanding of cloud security concepts for multi-cloud environments (AWS, Azure, GCP).
• Proficiency in scripting languages (Python, PowerShell) for process automation.
• Awareness of MITRE ATT&CK framework and threat trends; familiarity with cyber hygiene practices.
• Bachelor's or Master's degree in IT/CS/Cybersecurity; equivalent experience considered.

Responsibilities

• Maintain and grow attack surface management tools and reporting platforms; configure vulnerability scans, alerts, and reports.
• Lead triage of critical vulnerability findings with partner teams to analyze risk and coordinate remediation.
• Research solutions and mitigations for high-risk vulnerabilities and provide guidance to remediation teams.
• Engage with cybersecurity community and threat intel sources to stay current on vulnerabilities and threat actor activity.
• Assist in mapping Nordstrom's attack surface with network and offensive security teams and monitor dark web resources.
• Identify and track attack surface reduction efforts; analyze vulnerabilities and remediation progress metrics.
• Recommend opportunities to reduce attack surface through improved processes and tooling.
• Collaborate with cybersecurity peers and stakeholders on asset identification, scanning, analysis, and prioritization.
• Support regulatory/compliance requirements including evidence collection for vulnerability scanning and reporting (PCI).
• Contribute to Cybersecurity Standards, ASM SOPs, and runbooks.
• Monitor, review, and elevate errors in automation of operational processes.
• Expand cybersecurity domain depth by trainings, industry events, and cross-training with peers.

Skills

Security operations

Networking concepts

System administration

Cloud services

Asset management

Cybersecurity principles

Python scripting

PowerShell scripting

AI in ASM

MITRE ATT&CK

Education

Bachelor's or Master's in IT/CS/Cybersecurity

Tools

Vulnerability scanning tools

CSPM

ASM platforms

Network security tools

Job description

Nordstrom, Inc. in Seattle is seeking an Attack Surface Analyst II for a hybrid role, requiring in-office presence at Nordstrom headquarters at least 4 days a week.

You will identify, assess, and monitor vulnerabilities across cloud, on-prem, and third‑party environments to reduce exposure and improve cyber hygiene. You will lead triage of critical findings, research mitigations, and collaborate with security teams to drive remediation and metrics that track attack surface risk progress and