Cybersecurity Manager, Vulnerability/Exposure Management (Hybrid - Seattle)
Core
Lead the Attack Surface Management team to reduce Nordstrom's attack surface through continuous identification, assessment, and remediation of high-risk exposures across cloud, on-premises, and third-party environments.
Role type
Senior IC Cybersecurity Manager (Attack Surface Management)
Builds
Attack surface management program, automated risk prioritization processes, and executive reporting on exposure risk.
Domain
Cybersecurity, Cloud Security, Risk Management
Required skills
Team leadership and mentorship, Attack Surface Management program design, MITRE ATT&CK framework expertise, Offensive security methodologies, Cloud security controls (AWS, Azure, GCP), Vulnerability management, Scripting (Python, PowerShell), Regulatory compliance (PCI), Vendor and budget management
Preferred skills
CVSS and risk prioritization frameworks, Threat intelligence platforms, Cyber hygiene best practices, Emerging AI technologies in security, Advanced certifications (OSCE, GREM, CISSP, CISM)
Technologies
AWS, Azure, GCP, CSPM, Vulnerability scanners, Dark web monitoring tools, MITRE ATT&CK
Responsibilities
Lead, coach, and develop a team of attack surface analysts; Drive the growth of the attack surface management program and implement new capabilities; Own the map of Nordstrom's attack surface through collaboration with network and offensive security teams; Direct risk-based triage of critical vulnerabilities and coordinate expedited remediation; Lead data-driven initiatives to reduce vulnerabilities and champion architectural changes; Partner with threat intelligence and offensive security teams to integrate threat actor activity into exposure prioritization; Collaborate with AppSec, DevOps, and cloud platform teams to secure deployments; Develop and present metrics and executive reporting on attack surface risk; Maintain Cybersecurity Standards, SOPs, and runbooks; Lead compliance activities including evidence validation and PCI assessments; Lead evaluation, selection, and implementation of attack surface management tools.
Seniority
Senior, hands-on IC with team leadership
