Senior Attack Surface Lead – Automation & Risk

Nordstrom, Inc.; Seattle (WA); Hybrid; USD 142,000 - 221,000; Full time

Benefits offered by this job

Medical/Vision/Dental

Retirement plan

Paid Time Off

Life Insurance & Disability

Merchandise Discount

EAP Resources

Job summary

Nordstrom, Inc. in Seattle, WA is seeking a Senior Attack Surface Analyst for a hybrid role requiring in-office presence at least 4 days per week.

You will drive attack surface risk reduction across cloud, on-prem, and third-party surfaces, with hands-on remediation guidance and data-driven prioritization. You will automate discovery and triage, coordinate with partner teams, and produce enterprise reports on high-risk vulnerabilities.

Qualifications

• 4+ years in security operations or related fields.
• Advanced networking, cloud, asset management, and cybersecurity knowledge.
• Experience with vulnerability management, cloud security, and attack surface domains.
• Familiarity with OSINT methods and reconnaissance.
• Experience in multi-cloud environments (AWS, Azure, GCP).
• Knowledge of MITRE ATT&CK and regulatory requirements (PCI, SOC2).
• Proficient scripting for automation; strong written and verbal communication.
• Degree in IT/CS/Cybersecurity or equivalent experience.

Responsibilities

• Lead attack surface management initiatives across cloud, on-prem, and third-party exposures.
• Automate discovery, triage, and remediation workflows using AI and tooling.
• Triage critical vulnerabilities with partners and coordinate expedited remediation.
• Document Nordstrom's attack surface with OSINT and reconnaissance activities.
• Correlate data from CSPM, CMDB, and threat intel to prioritize risks.
• Produce executive-level reports and dashboards on high-risk findings.
• Mentor teammates and contribute to training and certifications.

Skills

Security operations

Vulnerability management

Networking basics

Cloud services knowledge

Scripting (Python/PowerShell)

Executive communication

Education

Bachelor’s or Master’s in IT/CS/Cybersecurity

Tools

AWS/Azure/GCP

OSINT techniques

Attack surface tools

Job description

Nordstrom, Inc. in Seattle, WA is seeking a Senior Attack Surface Analyst for a hybrid role requiring in-office presence at least 4 days per week.

You will drive attack surface risk reduction across cloud, on-prem, and third-party surfaces, with hands-on remediation guidance and data-driven prioritization. You will automate discovery and triage, coordinate with partner teams, and produce enterprise reports on high-risk vulnerabilities.