Senior Security Analyst – Vulnerability/Exposure Management

Nordstrom

. Lead triage of Nordstrom’s external attack surface through data-driven analysis of cloud, on-premises, and third-party exposures .

Posted 11/6/2026full-timeSeattle • Washington • United StatesSenior💰 $142,000 - $220,500 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in vulnerability management, cloud security, and attack surface management, with a strong focus on regulatory compliance and process automation. Proficient in scripting for operational efficiency and effective communication across technical and executive levels.

Highest-signal resume keywords

Vulnerability ManagementCloud SecurityAttack Surface ManagementScripting (Python, PowerShell)Regulatory Compliance (PCI, SOC2)

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability ManagementCloud SecurityAttack Surface ManagementNetwork SecurityOSINT TechniquesReconnaissance MethodologiesCyber HygieneCybersecurity PrinciplesProcess AutomationMulti-Cloud Environments

Soft Skills

Strong Communication SkillsMentoring

Tools & Technologies

Attack Surface Management ToolsCybersecurity StandardsReporting EcosystemOperational Automation ToolsThreat Intelligence Sources

Certifications & Qualifications

Security+GCIAGCIHGPENCISSP

Industry Keywords

PCI ComplianceSOC2 ComplianceMITRE ATT&CK FrameworkThreat Actor TacticsCybersecurity Operations

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud PlatformPython

About the role

Key responsibilities & impact

Lead triage of Nordstrom’s external attack surface through data-driven analysis of cloud, on-premises, and third-party exposures
Maintain and expand attack surface management tools and the reporting ecosystem
Troubleshoot escalated tool and script failures, identify gaps, develop solutions, and contribute to new capabilities
Drive AI-enabled process automation for attack surface discovery, triage, and remediation workflows
Lead triage of critical vulnerability findings and coordinate expedited remediation with partner teams
Map and document Nordstrom’s attack surface through OSINT, reconnaissance, discovery scans, and dark web monitoring
Correlate vulnerability, CSPM, CMDB, and threat intelligence data to prioritize risks
Collaborate with cybersecurity peers and technology teams on mitigation and remediation
Author enterprise communications, reports, dashboards, and metrics on high-risk vulnerabilities
Develop, monitor, and troubleshoot operational automation and tool integrations
Maintain cybersecurity standards, attack surface management procedures, and runbooks
Engage with cybersecurity communities and threat intelligence sources
Support PCI and SOC2 compliance requirements by capturing vulnerability-scanning evidence and artifacts
Mentor teammates through presentations and knowledge-sharing sessions

Requirements

What you’ll need

4+ years in security operations, vulnerability management, network security, system administration, or related fields
Advanced knowledge of networking, system administration, cloud services, asset management, and cybersecurity principles
Expertise in vulnerability management, cloud security, attack surface management, network security, and cyber hygiene
Working knowledge of OSINT techniques and reconnaissance methodologies
Experience implementing cybersecurity controls in multi-cloud environments (AWS, Azure, GCP)
Familiarity with the MITRE ATT&CK framework, threat actor tactics, techniques, and procedures (TTPs), and common attack vectors
Deep understanding of regulatory and compliance requirements (e.g., PCI, SOC2) for vulnerability and attack surface management
Proficiency in scripting languages such as Python and PowerShell for process automation
Strong communication skills, including writing for technical and executive audiences
Bachelor’s or Master’s degree in Information Technology, Computer Science, Cybersecurity, or a related field; equivalent experience will be considered in lieu of a degree
Preferred: proficiency in emerging AI technologies and their application within attack surface management
Preferred: experience coaching or mentoring junior analysts
Relevant certifications are preferred (e.g., Security+, GCIA, GCIH, GPEN, CISSP)

Benefits

Comp & perks

Medical/Vision, Dental, Retirement and Paid Time Away
Life Insurance and Disability
Merchandise Discount and EAP Resources
Performance-based incentives/bonuses may be available
401k
PTO accruals
Holidays