Job Description The Senior Attack Surface Analyst champions reduction of Nordstrom’s attack surface through continuous identification, assessment, and escalation of the highest-risk exposures, along with the actions need…
Looking for a flexible work schedule and an opportunity to earn extra income with room for growth? Prefer working outdoors instead of being stuck inside? This could be the perfect fit for you. Field Audit & Inventory Ins…
Skills: Field inspection, Data collection, Inventory verification, Photography, Communication
Meta is seeking a Wellness Response Partner to join our Wellness Response Team, under the Psychological Health, Strategy and Response function. This role offers a unique opportunity to work with and support a wide variet…
Application close date: Applications will be accepted on an ongoing basis until the requisition is closed. At Blue Origin, we envision millions of people living and working in space for the benefit of Earth. We’re workin…
Application close date: Applications will be accepted on an ongoing basis until the requisition is closed. At Blue Origin, we envision millions of people living and working in space for the benefit of Earth. We’re workin…
Application close date: Applications will be accepted on an ongoing basis until the requisition is closed. At Blue Origin, we envision millions of people living and working in space for the benefit of Earth. We’re workin…
Skills: Assembly, Integration, Troubleshooting, Aerospace systems, Electro-mechanical systems
Systems Engineer, Controls Fleet, Data Center Capacity Delivery
Seattle, Washington, United States · Hybrid
$105k–$160k/yr
Mid level$67M raised
Are you experienced in managing IT systems with a passion for building highly-available infrastructure at massive scale? Join us in driving cloud innovation and automation, deploying mission-critical systems that power g…
Skills: Systems Engineering, Windows Server Administration, Automation, Scripting, PowerShell
About Four Seasons: Four Seasons is powered by our people. We are a collective of individuals who crave to become better, to push ourselves to new heights and to treat each other as we wish to be treated in return. Our t…
HackerOne is a global leader in Continuous Threat Exposure Management (CTEM). The HackerOne Platform unites agentic AI solutions with the ingenuity of the world’s largest community of security researchers to continuously…
Job Description The William E. Boeing Department of Aeronautics and Astronautics has an outstanding opportunity for an instructional engineer to join their team. About this Opportunity Reporting to the facilities manager…
Skills: Instructional lab administration, Machining, Data acquisition, Computer programming, Troubleshooting
Environmental, Health and Safety (EHS) Consultant (Field Based)
Seattle, Washington, United States · Hybrid
$76k–$97k/yr
Mid level
ERM is hiring a motivated hands-on Environmental, Health and Safety (EHS) Consultant to join our growing team in Seattle, Washington. This position is expected to involve working a minimum of 3 days on-site. This is a fi…
Investigation Specialist II , Global Product Verification (GPV)
Seattle, Washington, United States · On-site
$22/hr–$31/hr
Mid level$67M raised
The Global Product Verification (GPV) team is Amazon's premier product authentication and verification team, protecting marketplace integrity through comprehensive product verification systems. We specialize in seller ve…
Skills: Product authentication, Quality assurance, Investigation, Data analysis, Root cause analysis
Field Training Supervisor (Overnight) – Full Time We offer a full benefits package, PTO, weekly pay, and more! Rate: $29.68/Hour Location: Seattle, WA Schedule: Monday - Friday, 9:30pm-6:15am We help make your world a sa…
Skills: Training delivery, Onboarding, Performance management, Security operations, Compliance
Join Axon and be a Force for Good. At Axon, we’re on a mission to Protect Life. We’re explorers, pursuing society’s most critical safety and justice issues with our ecosystem of devices and cloud software. Like our produ…
San Francisco, California, United States · On-site
$144k–$248k/yr
Senior$12B raised
Employee Applicant Privacy Notice Who we are: Shape a brighter financial future with us. Together with our members, we’re changing the way people think about and interact with personal finance. We’re a next-generation fi…
Skills: Machine learning, Anomaly detection, Python, SQL, Data engineering
You must apply with Public Sector Search & Consulting, Inc. directly to express interest in this position, click the link below to see full job posting. Public Sector Search & Consulting, Inc: 2026 Port of Seattle Police…
Skills: Law enforcement, Strategic planning, Personnel management, Budgeting, Resource allocation
Sign up with Clera and we'll reach out the moment a role actually fits you — no more spraying applications into the void.
$166k–$258k/yr
Full-time
bachelor degree, postgraduate degree
Medical insurance, Vision insurance, Dental insurance, Retirement plan, Paid time away, Life insurance
Posted 12d ago
~40 hrs/week
Responsibilities
The Senior Attack Surface Analyst leads the reduction of Nordstrom’s attack surface through continuous identification, assessment, and risk prioritization. This role collaborates with cross-functional teams to automate security processes and implement secure-by-design practices across the technology landscape.
Requirements
Candidates must have 6+ years of experience in security operations, vulnerability management, or offensive security. Proficiency in cloud security controls, scripting languages, and knowledge of the MITRE ATT&CK framework are required.
Full job description
Job Description
The Senior Attack Surface Analyst champions reduction of Nordstrom’s attack surface through continuous identification, assessment, and escalation of the highest-risk exposures, along with the actions needed to manage that risk. As a senior leader on the Attack Surface Management team, this role collaborates closely with cybersecurity and technology partner teams to prioritize risk, execute remediation activities, and automate processes that secure the technology landscape.
Key Responsibilities
Lead the growth of the attack surface management program, develop and implement solutions to improve visibility into exposures, and contribute to the design and implementation of net-new capabilities.
Continuously drive improvements in attack surface management processes, methodologies, and security toolsets to enhance operational effectiveness, automating where possible.
Maintain Cybersecurity Standards, Attack Surface Management standard operating procedures, and runbooks.
Collaborate with AppSec, DevOps, and cloud platform teams to secure deployments and integrate security best practices into the design of software and related systems, ensuring a secure-by-design approach.
Maintain a map of Nordstrom’s attack surface through collaboration with network and offensive security teams, conducting regular assessments and reconnaissance activities, and leveraging dark web monitoring resources.
Lead data-driven, risk-prioritized, enterprise-wide initiatives to reduce vulnerabilities and exposures across Nordstrom’s technologies; identify opportunities and champion architectural changes that reduce attack surface.
Develop and present metrics to measure operational efficiency and attack surface risk.
Maintain domain expertise by completing trainings, attending industry presentations, obtaining certifications, engaging with the cybersecurity community, and consuming threat intelligence sources.
Support the growth of teammates’ domain expertise through mentorship, presentations, and knowledge-sharing sessions.
Lead compliance activities for the domain, including evidence validation and submission, proactive control evaluation and mitigation of gaps, and assessments (e.g., PCI).
Qualifications
Required
6+ years in security operations, vulnerability management, or offensive security domains, including experience in a senior or lead capacity.
Deep knowledge of the MITRE ATT&CK framework, threat actor tactics, techniques, and procedures (TTPs), and common attack vectors.
Experience implementing cloud security controls in a multi-cloud environment.
Proficiency in enterprise information technology (IT) architecture principles and practices.
Knowledge of offensive security methodologies and ethical hacking principles and practices.
Deep understanding of system landscape and data flow within the domain and across adjacent domains.
Expertise in scripting languages (e.g., Python, PowerShell) for process automation.
Advanced knowledge of networking, system administration, cloud services, asset management, and cybersecurity principles.
Deep understanding of the processes and controls needed to satisfy relevant regulatory and compliance requirements (e.g., PCI) for vulnerability and attack surface management.
Strong leadership and communication skills.
Bachelor’s or Master’s degree in Information Technology, Computer Science, Cybersecurity, or a related field; equivalent experience will be considered in lieu of a degree.
Preferred
Experience developing attack surface management capabilities and coaching more junior analysts.
Expertise across cybersecurity domains including vulnerability management, cloud security, attack surface management, network security, and cyber hygiene.
Demonstrated thought leadership on the application of emerging AI technologies within cybersecurity domains.
The pay range(s) below has been provided in compliance with state specific laws. Pay ranges may be different for other locations. Pay offers are dependent on the location, as well as job-related knowledge, skills, and experience.
$166,000.00 - $258,000.00 Annual
We’ve got you covered…
Our employees are our most important asset and that’s reflected in our benefits. Nordstrom is proud to offer a variety of benefits to support employees and their families, including:
Medical/Vision, Dental, Retirement and Paid Time Away
Life Insurance and Disability
Merchandise Discount and EAP Resources
This position may be eligible for performance-based incentives/bonuses. Benefits include 401k, medical/vision/dental/life/disability insurance options, PTO accruals, Holidays, and more. Eligibility requirements may apply based on location, job level, classification, and length of employment. Learn more in the Nordstrom Benefits Overview by copying and pasting the following URL into your browser: https://careers.nordstrom.com/pdfs/BenOverview17-19.pdf
A few more important points...
The job posting highlights the most critical responsibilities and requirements of the job. It’s not all-inclusive. There may be additional duties, responsibilities and qualifications for this job.
For Los Angeles or San Francisco applicants: Nordstrom is required to inform you that we conduct background checks after conditional offer and consider qualified applicants with criminal histories in a manner consistent with legal requirements per Los Angeles, Cal. Muni. Code 189.04 and the San Francisco Fair Chance Ordinance. For additional state and location specific notices, please refer to the Legal Notices document within the FAQ section of the Nordstrom Careers site.
Applicants with disabilities who require assistance or accommodation should contact the nearest Nordstrom location, which can be identified at www.nordstrom.com.
Please be mindful that there may be legal notices and requirements related to this job posting that are specific to your state. Review the Career Site FAQ’s for relevant information and guidelines.
Current Nordstrom employees: To apply, log into Workday, click the Careers button and then click Find Jobs.
Nordstrom keeps job postings open for at least one day after the posting date.
At Nordstrom, we empower our employees to set their sights high and blaze their own trails. This is a place where your success and growth are truly a result of your own efforts and achievements.
Our teams are made up of motivated people who work hard to become leaders within the company, at all levels of the organization. These well-traveled paths show how hard work, loyalty, a competitive spirit and your unwavering commitment to the customer can take you and your career to new places.
In addition to being a great place to have a career, we’re also committed to respecting the environment and supporting our communities. To learn more, check out NordstromCares.com.
Interested in joining the Nordstrom team?
See some of our current opportunities under our Careers tab or visit careers.nordstrom.com to apply today.
Offices: 1600 7th Ave, Seattle, Washington 98101, US · 225 W 57th St, New York, NY 10019, US
How many Security & Safety jobs are open in Seattle, WA right now?
There are currently 1,037 open security & safety positions in Seattle, WA listed on Clera. New openings are added daily as companies post roles.
Which companies are hiring for Security & Safety roles in Seattle, WA?
Companies currently hiring include Amazon, Allied Universal, Blue Origin, Low Income Housing Institute (LIHI), Axon, among others. Browse the listings above to see every active employer.
Are there remote or hybrid Security & Safety jobs in Seattle, WA?
Yes — 218 of the 1037 open security & safety positions offer remote or hybrid work (75 remote, 143 hybrid).
How do I apply for Security & Safety jobs in Seattle, WA?
Each listing links directly to the employer's application page. Apply early — fresh listings get the most recruiter attention in the first two weeks.