Senior Security Analyst - Vulnerability/Exposure Management (Hybrid - Seattle)
Core
Leads triage of Nordstrom's external attack surface through data-driven analysis of cloud, on-prem, and third-party exposures to drive down risk.
Role type
Senior IC security analyst (vulnerability & attack surface management)
Builds
Attack surface management tools, reporting ecosystem, and automated remediation workflows
Domain
Cybersecurity, Cloud Security, Vulnerability Management
Required skills
Vulnerability management, Cloud security (AWS/Azure/GCP), Attack surface management, Network security, OSINT, Scripting (Python/PowerShell), Risk prioritization, Compliance (PCI/SOC2)
Preferred skills
AI technologies in security, Mentoring junior analysts, Security certifications (Security+, CISSP, etc.)
Technologies
AWS, Azure, GCP, MITRE ATT&CK, CSPM, CMDB, OSINT tools, Python, PowerShell
Responsibilities
Maintain and grow attack surface management tools and reporting ecosystem; Drive process automation leveraging AI; Lead triage of critical vulnerability findings; Map and document attack surface via OSINT and reconnaissance; Correlate data across vulnerability, cloud posture, and threat intelligence sources; Author enterprise-level communications and dashboards on vulnerabilities; Develop teammates' domain expertise through mentorship
Seniority
Senior, hands-on IC
