Attack Surface Analyst 2

Nordstrom

Confirmed live yesterday High trust

Hybrid

Quick summary

Work type: Hybrid
Location: Seattle, WA
Employment: Full-time
Posted: 20 days ago
Freshness: Confirmed live yesterday
Nearby: 99+ roles within 25 mi

Market check

Salary context

How this pay compares to similar roles

Similar $153k

$114k $193k

below market most similar roles pay here above market

This listing doesn't post a salary. Most similar roles pay $124,963–$181,250.

Based on 240 similar postings.

Employer

About Nordstrom

Nordstrom is a leading American luxury department store chain offering a wide selection of clothing, shoes, accessories, and beauty products through its stores, Nordstrom Rack outlets, and online. Industry: Luxury Department Store Retail

Nordstrom currently has 60 open roles on FindRole.

Listed pay typically runs $166,000–$258,000 across 23 roles with salary data.

Most-posted roles

View all roles at Nordstrom

At a glance

TL;DR · Attack Surface Analyst 2

Role Posting Log in to save

The Attack Surface Analyst 2 joins the cybersecurity team to identify, assess, and monitor vulnerabilities across cloud, on-prem, and third-party environments. This role focuses on reducing exposures and improving cyber hygiene processes by configuring vulnerability scans, developing alerts, and building reporting templates. You will lead the triage of critical findings, research mitigations for high-risk vulnerabilities, and support reconnaissance activities with network and offensive security teams. Key responsibilities include monitoring dark web resources, managing automation errors, and ensuring compliance with standards like PCI. Required skills include proficiency in Python and PowerShell, knowledge of AWS, Azure, and GCP cloud security, and familiarity with the MITRE ATT&CK framework. You will utilize CSPM tools and exposure management platforms to analyze potential impact and likelihood of exploitation.

Skills

Vulnerability Management Attack Surface Management Python PowerShell AWS Azure GCP CSPM MITRE ATT&CK Network Security Patch Management PCI Cloud Security Asset Management Automation System Administration Security Operations

What you'll do

Configure and troubleshoot vulnerability scans, alerts, and reporting templates for attack surface management tools.
Lead the triage of critical vulnerability findings and coordinate expedited remediation with partner teams.
Research solutions and mitigations for high-risk vulnerabilities and provide technical guidance to remediation teams.
Monitor dark web resources and support reconnaissance activities to map the corporate attack surface.
Analyze vulnerabilities to track the status of attack surface reduction efforts and remediation progress metrics.
Identify opportunities to reduce the attack surface through improved processes, tooling, or architectural changes.
Capture evidence and artifacts related to vulnerability scanning to support regulatory and compliance requirements.
Monitor and escalate errors in the automation of operational security processes.

What we're looking for

Must have 2+ years of experience in security operations, vulnerability management, cybersecurity, IT, or related fields.
Must possess a Bachelor's or Master's degree in Information Technology, Computer Science, Cybersecurity, or a related field (equivalent experience considered).
Must have an understanding of networking, system administration, cloud services, asset management, and cybersecurity principles.
Must have working knowledge of vulnerability identification, CSPM, attack surface management platforms, and network security tools.
Must understand processes and controls for regulatory and compliance requirements such as PCI.
Must understand cloud security concepts for multi-cloud environments (AWS, Azure, GCP) and cloud asset exposure.
Must be proficient in scripting languages such as Python or PowerShell for process automation.
Must have working knowledge of emerging AI technologies and their applications within the ASM domain.

Save