Senior Attack Surface Analyst: Vulnerability & Exposure Lead

Brobston Group; Seattle (WA); Hybrid; USD 142,000 - 221,000; Full time

Benefits offered by this job

Medical/Vision/Dental

Retirement

Paid Time Away

Life Insurance

Disability

Merchandise Discount

EAP Resources

Job summary

Nordstrom, Inc. in Seattle is seeking a Senior Attack Surface Analyst to lead the triage of the external attack surface across cloud, on‑prem, and third‑party exposures.

The role emphasizes risk‑based prioritization, remediation guidance, and collaboration with partner teams in a hybrid Seattle office. Ideal candidates have 4+ years in security operations, strong scripting skills, multi‑cloud experience (AWS/Azure/GCP), and familiarity with MITRE ATT&CK.

Qualifications

• 4+ years in security operations, vulnerability management, network security, system administration, or related fields.
• Advanced knowledge of networking, system administration, cloud services, asset management, and cybersecurity principles.
• Expertise across cybersecurity domains including vulnerability management, cloud security, attack surface management, network security, and cyber hygiene.
• OSINT techniques and reconnaissance methodologies.
• Experience implementing cybersecurity controls in multi‑cloud environments (AWS, Azure, GCP).
• Familiarity with the MITRE ATT&CK framework, threat actor TTPs, and common attack vectors.
• Deep understanding of regulatory and compliance requirements (PCI, SOC2) for vulnerability and attack surface management.
• Proficiency in scripting languages (Python, PowerShell) for process automation.
• Strong communication skills, including writing for technical and executive audiences.

Responsibilities

• Lead the maintenance and growth of attack surface management tools and the reporting ecosystem.
• Drive process automation leveraging AI enablement to streamline attack surface discovery, triage, and remediation workflows.
• Lead the triage of critical vulnerability findings with partner teams and stakeholders, coordinating expedited remediation.
• Map and document Nordstrom’s attack surface with OSINT and reconnaissance activities.
• Correlate data across vulnerability identification, CSPM, CMDB, and threat intel to prioritize exposures.
• Collaborate with cybersecurity peers and partner teams to reduce the attack surface.
• Author enterprise‑level reports and dashboards on high‑risk vulnerabilities and mitigations.
• Develop, monitor, and troubleshoot automation of operational processes and tool integrations.
• Maintain Cybersecurity Standards, ASM SOPs, and runbooks.
• Engage with cybersecurity community and threat intel sources for latest threats.
• Support regulatory and compliance requirements including PCI, SOC2 with evidence collection.
• Mentor teammates and build knowledge through trainings and presentations.

Skills

Security operations

Networking

Sysadmin

Cloud services

Asset management

Cybersecurity principles

OSINT

Reconnaissance

AWS

Azure

GCP

MITRE ATT&CK

TTPs

PCI

SOC2

Python

PowerShell

Communication

Education

Bachelor’s or Master’s degree in IT, CS, Cybersecurity

Job description

Nordstrom, Inc. in Seattle is seeking a Senior Attack Surface Analyst to lead the triage of the external attack surface across cloud, on‑prem, and third‑party exposures.

The role emphasizes risk‑based prioritization, remediation guidance, and collaboration with partner teams in a hybrid Seattle office. Ideal candidates have 4+ years in security operations, strong scripting skills, multi‑cloud experience (AWS/Azure/GCP), and familiarity with MITRE ATT&CK.