Attack Surface Management Lead

Brobston Group; Seattle (WA); Hybrid; USD 166,000 - 258,000; Full time

Benefits offered by this job

Medical/Vision, Dental

401k & Retirement plan

Paid Time Off

Job summary

Nordstrom seeks a senior leader to drive its Attack Surface Management program, guiding a team of analysts and collaborating with cybersecurity, DevOps, and cloud teams to reduce exposures across cloud, on-premises, and third-party environments.

You will own roadmaps, coordinate remediation timelines, and present risk metrics to senior leadership, while advancing security tooling and AI-driven discovery across Nordstrom’s technology landscape.

Qualifications

• 6+ years in security operations, vulnerability management, offensive security, or attack surface management, incl. 2+ years leading a team.
• Demonstrated experience building, running, or growing an attack surface or exposure management program in an enterprise.
• Proven track record mentoring analysts and developing technical career paths.
• Deep knowledge of the MITRE ATT&CK framework, TTPs, and common attack vectors.
• Experience implementing cloud security controls in multi-cloud environments (AWS, Azure, GCP).
• Proficiency in scripting for automation (Python/PowerShell).
• Working knowledge of emerging AI technologies in security domains.
• Bachelor’s or Master’s degree in IT/CS/Cybersecurity or equivalent experience.

Responsibilities

• Lead a team of attack surface analysts, set priorities, and mentor growth.
• Grow the attack surface management program, define its roadmap and new capabilities.
• Map Nordstrom’s attack surface with cross-team collaboration and regular assessments.
• Direct risk-based triage of vulnerabilities and coordinate expedited remediation.
• Drive data-driven, risk-prioritized initiatives to reduce exposures across technologies.
• Automate processes and evaluate AI tools to improve discovery and reporting.
• Collaborate with threat intel and offensive security teams to incorporate TTPs.
• Work with AppSec, DevOps, and cloud teams to secure deployments.
• Develop metrics and executive reports on attack surface risk and progress.
• Maintain standard operating procedures and runbooks.

Skills

Security Operations

Attack Surface Mgmt

Mentoring Analysts

Cloud Security

Scripting (Python/PowerShell)

Education

Bachelor’s or Master in IT/CS/Cybersecurity

Equivalent experience considered

Tools

CSPM tools

Vulnerability scanners

Job description

Nordstrom seeks a senior leader to drive its Attack Surface Management program, guiding a team of analysts and collaborating with cybersecurity, DevOps, and cloud teams to reduce exposures across cloud, on-premises, and third-party environments.

You will own roadmaps, coordinate remediation timelines, and present risk metrics to senior leadership, while advancing security tooling and AI-driven discovery across Nordstrom’s technology landscape.