Senior Security Analyst - Vulnerability/Exposure Management (Hybrid - Seattle)

Responsibilities: Maintain and enhance attack surface management tools and reporting; troubleshoot failures and close coverage gaps Automate discovery, triage, and remediation workflows using AI-enabled processes Lead triage of critical vulnerabilities with partners for expedited remediation Map Nordstrom’s attack surface via OSINT, reconnaissance, and monitoring resources Correlate vulnerability data with CSPM, CMDB, and threat intel to prioritize risk Collaborate with cybersecurity and technology teams to implement mitigations Author enterprise-level reports and dashboards on high-risk vulnerabilities and mitigations Develop and troubleshoot automation of operational processes and tool integrations Maintain Cybersecurity Standards and runbooks for attack surface management Engage with threat intelligence sources to stay current on threats and remediation methods Support regulatory/compliance evidence gathering (e.g., PCI, SOC2) Mentor teammates and expand domain expertise through knowledge-sharing and training

Key requirements: 4+ years in security operations, vulnerability management, or related fields Advanced networking, systems, cloud, asset management, and cybersecurity knowledge Expertise in vulnerability management, cloud security, attack surface management, network security, and cyber hygiene Working knowledge of OSINT techniques Experience in multi-cloud environments (AWS, Azure, GCP) Familiarity with MITRE ATT&CK, TTPs, and common attack vectors Understanding of PCI and SOC2 regulatory requirements for vulnerability and attack surface management Proficiency in scripting (Python, PowerShell) for automation Strong written and spoken communication for technical and executive audiences Bachelor’s or Master’s in IT, CS, Cybersecurity, or related field; equivalent experience considered strong communication mentorship cross-functional collaboration OSINT techniques CSPM CMDB asset management