Attack Surface Analyst 2

Nordstrom

Confirmed live today High trust
Hybrid

Quick summary

Work type
Hybrid
Location
Seattle, WA
Employment
Full-time
Posted
75 days ago
Freshness
Confirmed live today

Market check

Salary context

How this pay compares to similar roles

Similar $147k
$104k $185k
below market most similar roles pay here above market

This listing doesn't post a salary. Most similar roles pay $117,000–$177,300.

Based on 240 similar postings.

Employer

About Nordstrom

Nordstrom is a leading American luxury department store chain offering a wide selection of clothing, shoes, accessories, and beauty products through its stores, Nordstrom Rack outlets, and online. Industry: Luxury Department Store Retail

Nordstrom currently has 60 open roles on FindRole.

Listed pay typically runs $166,000–$258,000 across 23 roles with salary data.

Most-posted roles

View all roles at Nordstrom

At a glance

TL;DR · Attack Surface Analyst 2

The Attack Surface Analyst II joins the cybersecurity team to identify, assess, and monitor vulnerabilities across cloud, on-prem, and third-party environments. This role focuses on reducing exposures by maintaining attack surface management tools, configuring vulnerability scans, and developing reporting templates. The analyst will lead the triage of critical findings, research mitigations for high-risk vulnerabilities, and conduct reconnaissance activities alongside network and offensive security teams. Key responsibilities include monitoring dark web resources, tracking remediation progress, and ensuring compliance with standards like PCI. Required skills include proficiency in Python and PowerShell for automation, knowledge of AWS, Azure, and GCP cloud security, and familiarity with the MITRE ATT&CK framework. The position addresses the technical problem of proactive cyber hygiene and managing multi-cloud asset exposure risks.

What you'll do

  • Configure and troubleshoot vulnerability scans, alerts, and reporting templates for attack surface management tools.
  • Lead the triage of critical vulnerability findings and coordinate expedited remediation with partner teams.
  • Research solutions and mitigations for high-risk vulnerabilities and provide technical guidance to remediation teams.
  • Support reconnaissance activities to map the attack surface and monitor dark web resources for emerging exposures.
  • Analyze vulnerabilities and potential impact to track attack surface reduction efforts and remediation progress.
  • Identify and recommend architectural changes, tooling, or process improvements to reduce the corporate attack surface.
  • Capture evidence and artifacts related to vulnerability scanning to satisfy regulatory and compliance requirements.
  • Monitor and escalate errors in the automation of operational security processes.

What we're looking for

  • 2+ years of experience in security operations, vulnerability management, cybersecurity, IT, or related fields.
  • Bachelor's or Master's degree in Information Technology, Computer Science, Cybersecurity, or a related field (equivalent experience considered).
  • Understanding of networking, system administration, cloud services, asset management, and cybersecurity principles.
  • Working knowledge of vulnerability identification, CSPM, attack surface management platforms, and network security tools.
  • Understanding of cloud security concepts for multi-cloud environments (AWS, Azure, GCP) and cloud asset exposure.
  • Proficiency in scripting languages such as Python or PowerShell for process automation.
  • Understanding of processes and controls for regulatory and compliance requirements like PCI.
  • Working knowledge of emerging AI technologies and their applications within the ASM domain (preferred).

More like this

Similar roles

Attack Surface Analyst 2

Nordstrom

Seattle, WA 20 days ago
Vulnerability Management Attack Surface Management Python PowerShell AWS Azure GCP CSPM MITRE ATT&CK Network Security Patch Management PCI Cloud Security Asset Management Automation System Administration Security Operations
2+ yrs exp Hybrid

Senior 2 Cybersecurity Analyst, Attack Surface Management

Nordstrom

Seattle, WA 46 days ago
Attack Surface Management Python PowerShell MITRE ATT&CK Cloud Security Vulnerability Management Offensive Security PCI Network Security Threat Intelligence DevOps Asset Management System Administration AI Ethical Hacking
6+ yrs exp Hybrid

Senior Network Security Engineer

Nordstrom

Seattle, WA 153 days ago
AWS Azure GCP Terraform Python Ansible Palo Alto Networks Zscaler ZTNA 802.1X EAP-TLS RADIUS ClearPass SAML OAuth PKI TCP/IP BGP SD-WAN CI/CD GitOps Splunk New Relic
7+ yrs exp Hybrid

Engineer 2, AI Agentic Solutions

Nordstrom

Seattle, WA 88 days ago
LLMs RAG LangGraph CrewAI Semantic Kernel OpenAI Assistants API AWS GCP SQL NoSQL Kubernetes Docker CI/CD Spark BigQuery Redshift RESTful services Event-driven architecture
2+ yrs exp Hybrid

Principal Security Engineer, Identity and Access Management

Nordstrom

Seattle, WA 57 days ago
Identity & Access Management (IAM) OAuth 2.0 OpenID Connect SAML SCIM SPIFFE/SPIRE FIDO2 WebAuthn NIST 800-63 AWS IAM Azure Entra ID GCP IAM CIAM SSO Identity Orchestration Zero Trust infrastructure-as-code CI/CD Threat Modeling PCI-DSS CCPA SOX
10+ yrs exp Hybrid

Data Analyst 2, Inventory

Nordstrom

Seattle, WA 7 days ago $87,500–$145,500
SQL Python Tableau Power BI AWS GCP R ETL Git Teradata Alteryx Data Warehousing Data Wrangling
3+ yrs exp Hybrid