Attack Surface Analyst II

Nordstrom

Confirmed live yesterday High trust

Hybrid

Quick summary

Work type: Hybrid
Location: Seattle, WA
Salary: $121,500–$188,500 / yr
Posted: 29 days ago
Freshness: Confirmed live yesterday
Nearby: 99+ roles within 25 mi

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $165k

This role $155k

$113k most similar roles pay here $204k

This role pays less than 55% of similar roles. Most pay $136,187–$193,000 — the shaded band above. At the midpoint, this role pays about $155k versus about $165k for comparable roles.

Based on 240 similar postings.

Employer

About Nordstrom

Nordstrom is a leading American luxury department store chain offering a wide selection of clothing, shoes, accessories, and beauty products through its stores, Nordstrom Rack outlets, and online. Industry: Luxury Department Store Retail

Nordstrom currently has 30 open roles on FindRole.

Listed pay typically runs $142,000–$220,500 across 29 roles with salary data.

Most-posted roles

View all roles at Nordstrom

At a glance

TL;DR · Attack Surface Analyst II

Role Posting Log in to save

As an Attack Surface Analyst 2, you will join the cybersecurity team to identify, assess, prioritize, and monitor vulnerabilities across cloud, on-premise, and third-party environments. You will manage attack surface management tools by configuring scans, developing alerts, and building reporting templates while leading the triage of critical findings with partner teams. Your daily work involves researching mitigations for high-risk vulnerabilities, monitoring dark web resources for exposures, and collaborating on asset identification to improve cyber hygiene. The role requires proficiency in Python and PowerShell for automation, as well as knowledge of AWS, Azure, and GCP cloud security. You will utilize tools for vulnerability identification, cloud security posture management, and network security while applying the MITRE ATT&CK framework. This position focuses on reducing organizational exposure by analyzing risks, ensuring regulatory compliance like PCI, and improving architectural security controls.

Skills

Vulnerability Management Attack Surface Management CSPM Python PowerShell AWS Azure GCP PCI Network Security Patch Management Cloud Security Scripting Cyber Hygiene

What you'll do

Identify, assess, prioritize, and monitor vulnerabilities across cloud, on-premise, and third-party environments.
Configure and troubleshoot vulnerability scans, develop alerts, and tune false positives for attack surface management tools.
Lead the triage of critical findings and coordinate expedited remediation with partner teams and stakeholders.
Research solutions and provide technical guidance to remediation teams for high-risk vulnerabilities.
Monitor dark web resources and conduct reconnaissance activities to map the organization's attack surface.
Track the status of reduction efforts and develop metrics to measure risk and remediation progress.
Support regulatory and compliance requirements by capturing evidence and artifacts related to vulnerability scanning.
Develop standard operating procedures, runbooks, and technical documentation for attack surface management.

What we're looking for

2+ years of experience in security operations, vulnerability management, cybersecurity, IT, or related fields.
Bachelor's or Master's degree in Information Technology, Computer Science, Cybersecurity, or a related field (equivalent experience accepted).
Understanding of networking, system administration, cloud services, asset management, and cybersecurity principles.
Working knowledge of tools for vulnerability identification, CSPM, attack surface management platforms, and network security.
Knowledge of processes to satisfy regulatory and compliance requirements such as PCI.
Understanding of multi-cloud environments (AWS, Azure, GCP) and specific cloud assets like S3 buckets and Azure Blob storage.
Proficiency in scripting languages including Python and PowerShell for process automation.
Working knowledge of emerging AI technologies applied within the attack surface management domain.

Save