Seattle Hybrid: Attack Surface Management Lead

Nordstrom, Inc.; Seattle (WA); Hybrid; USD 166,000 - 258,000; Full time

Benefits offered by this job

Medical/Vision

Dental

Retirement

Paid Time Away

Life Insurance

Disability

Merchandise Discount

EAP Resources

Job summary

Nordstrom, Inc. in Seattle, WA, seeks a Manager of Attack Surface Management to lead a team and partner with cybersecurity and technology groups. The role emphasizes proactive risk reduction across cloud, on-premises, and third-party environments in a hybrid in-office setting.

The candidate will drive program growth, implement new capabilities, and ensure timely remediation with executives’ visibility. This leadership role requires strong collaboration and AI-enabled security tooling awareness.

Qualifications

• 6+ years in security operations, vulnerability management, offensive security, or attack surface management, including 2+ years leading a team or in a senior role.
• Experience building or growing an attack surface or exposure management program in an enterprise.
• Proven mentoring ability and career development for analysts.
• Deep knowledge of MITRE ATT&CK, TTPs, and common attack vectors.
• Experience implementing cloud security controls in multi-cloud environments (AWS, Azure, GCP).
• Proficiency in scripting for automation (Python/PowerShell).
• Strong leadership and ability to present to senior leadership.

Responsibilities

• Lead and develop a team of attack surface analysts, set priorities, assign work, and mentor.
• Grow the attack surface management program; set roadmap and implement new capabilities.
• Own Nordstrom's attack surface map with collaboration across security teams; use dark web monitoring.
• Direct risk-based triage of critical vulnerabilities and expedited remediation with stakeholders.
• Lead enterprise-wide initiatives to reduce exposures and drive architectural changes.
• Improve attack surface processes and tooling; explore AI to improve discovery and prioritization.
• Collaborate with AppSec, DevOps, and cloud teams to secure deployments and design secure-by-design systems.
• Develop and present metrics and executive reporting on attack surface risk and remediation progress.
• Maintain Attack Surface Management SOPs and runbooks; ensure compliance activities (e.g., PCI).
• Lead evaluation and implementation of tools; manage vendor relationships, budget, and timelines.
• Maintain domain expertise through trainings, industry events, and threat intelligence sources.

Skills

Leadership

Attack Surface

Vuln Management

Cloud Security

MITRE ATT&CK

Scripting

Communication

Stakeholder Mgmt

Education

IT/Cybersecurity degree

Tools

CSPM tools

Vulnerability scanners

Attack surface platforms

Network security tools

Cloud security tools

Job description

Nordstrom, Inc. in Seattle, WA, seeks a Manager of Attack Surface Management to lead a team and partner with cybersecurity and technology groups. The role emphasizes proactive risk reduction across cloud, on-premises, and third-party environments in a hybrid in-office setting.

The candidate will drive program growth, implement new capabilities, and ensure timely remediation with executives’ visibility. This leadership role requires strong collaboration and AI-enabled security tooling awareness.