Job Description

Locations

• WA, Seattle

Skills Required

• cybersecurity tools including vulnerability identificationintermediate
• scripting languagesintermediate
• emerging AI technologiesintermediate
• cybersecurity domainsintermediate

Required Qualifications

• 2+ years in security operations, vulnerability management, cybersecurity, IT, or related fields. (experience, 2 years)
• 2+ years in security operations, vulnerability management, cybersecurity, IT, or related fields. (experience, 2 years)
• Understanding of networking, system administration, cloud services, asset management and cyber security principles. (experience)
• Understanding of networking, system administration, cloud services, asset management and cyber security principles. (experience)
• Working knowledge of cybersecurity tools including vulnerability identification, cloud security posture management (CSPM), attack surface / exposure management platforms , network security tools (experience)
• Working knowledge of cybersecurity tools including vulnerability identification, cloud security posture management (CSPM), attack surface / exposure management platforms , network security tools (experience)
• Understanding of processes and controls needed to satisfy relevant regulatory and compliance requirements [e.g. PCI] for vulnerability and attack surface management. (experience)
• Understanding of processes and controls needed to satisfy relevant regulatory and compliance requirements [e.g. PCI] for vulnerability and attack surface management. (experience)
• Understanding of cloud security concepts for multi-cloud environments (AWS, Azure, GCP), Cloud Asset Exposure: AWS S3 buckets, Azure Blob storage (experience)
• Understanding of cloud security concepts for multi-cloud environments (AWS, Azure, GCP), Cloud Asset Exposure: AWS S3 buckets, Azure Blob storage (experience)
• Proficiency in scripting languages (Python, PowerShell) for process automation (experience)
• Proficiency in scripting languages (Python, PowerShell) for process automation (experience)
• Working knowledge of emerging AI technologies and how they can be applied within the ASM domain (experience)
• Working knowledge of emerging AI technologies and how they can be applied within the ASM domain (experience)
• Familiarity with cybersecurity domains and concepts including the MITRE ATT&CK framework, common attack vectors, vulnerabilities and exposures, defense-in-depth principles, network security controls, and cloud and endpoint exposure risks (experience)
• Familiarity with cybersecurity domains and concepts including the MITRE ATT&CK framework, common attack vectors, vulnerabilities and exposures, defense-in-depth principles, network security controls, and cloud and endpoint exposure risks (experience)
• Awareness of best practices for cyber hygiene including patch management, hardening, secure configuration management, and lifecycle management (experience)
• Awareness of best practices for cyber hygiene including patch management, hardening, secure configuration management, and lifecycle management (experience)
• Bachelor's or Master's degree in Information Technology, Computer Science, Cybersecurity, or a related field; equivalent experience will be considered in lieu of a degree. (experience)
• Bachelor's or Master's degree in Information Technology, Computer Science, Cybersecurity, or a related field; equivalent experience will be considered in lieu of a degree. (experience)

Responsibilities

• Maintain and grow attack surface management tools and reporting platforms by configuring and troubleshooting vulnerability scans, developing alerts, reviewing and tuning false positives, and building reporting templates to meet customer requirements.
• Maintain and grow attack surface management tools and reporting platforms by configuring and troubleshooting vulnerability scans, developing alerts, reviewing and tuning false positives, and building reporting templates to meet customer requirements.
• Lead the triage of critical vulnerability findings alongside partner teams and stakeholders to analyze the risk of emergent vulnerabilities and patch releases, coordinating expedited remediation as needed.
• Lead the triage of critical vulnerability findings alongside partner teams and stakeholders to analyze the risk of emergent vulnerabilities and patch releases, coordinating expedited remediation as needed.
• Research solutions and mitigations for highest risk vulnerabilities and provide technical guidance to remediation teams.
• Research solutions and mitigations for highest risk vulnerabilities and provide technical guidance to remediation teams.
• Engage with cybersecurity community and threat intel sources to stay current on latest vulnerability publications, zero-day exploits, and threat actor activity trends.
• Engage with cybersecurity community and threat intel sources to stay current on latest vulnerability publications, zero-day exploits, and threat actor activity trends.
• Assist in mapping Nordstrom's attack surface by supporting reconnaissance activities with network and offensive security teams and monitoring dark web resources for emerging exposures.
• Assist in mapping Nordstrom's attack surface by supporting reconnaissance activities with network and offensive security teams and monitoring dark web resources for emerging exposures.
• Identify and track the status of attack surface reduction efforts, by analyzing vulnerabilities and exposure, potential impact, and likelihood of exploitation, and contribute to metrics that measure attack surface risk and remediation progress.
• Identify and track the status of attack surface reduction efforts, by analyzing vulnerabilities and exposure, potential impact, and likelihood of exploitation, and contribute to metrics that measure attack surface risk and remediation progress.
• Identify and recommend opportunities to reduce attack surface through improved processes, tooling, or architectural changes.
• Identify and recommend opportunities to reduce attack surface through improved processes, tooling, or architectural changes.
• Collaborate with cybersecurity peers, technology partner teams and other stakeholder groups to conduct asset identification and classification, vulnerability scanning, analysis, and prioritization activities.
• Collaborate with cybersecurity peers, technology partner teams and other stakeholder groups to conduct asset identification and classification, vulnerability scanning, analysis, and prioritization activities.
• Support regulatory and compliance requirements including capturing evidence and artifacts related to vulnerability scanning and reporting for [e.g. PCI]
• Support regulatory and compliance requirements including capturing evidence and artifacts related to vulnerability scanning and reporting for [e.g. PCI]
• Contribute to Cybersecurity Standards, Attack Surface Management standard operating procedures, and runbooks.
• Contribute to Cybersecurity Standards, Attack Surface Management standard operating procedures, and runbooks.
• Monitor, review, and escalate errors in automation of operational processes.
• Monitor, review, and escalate errors in automation of operational processes.
• Increase cybersecurity domain depth and breadth by completing trainings, attending industry presentations, and cross-training with peers across Cybersecurity & Privacy and Technology teams.
• Increase cybersecurity domain depth and breadth by completing trainings, attending industry presentations, and cross-training with peers across Cybersecurity & Privacy and Technology teams.

Benefits

• general: The pay range(s) below has been provided in compliance with state specific laws. Pay ranges may be different for other locations. Pay offers are dependent on the location, as well as job-related knowledge, skills, and experience.

Tags & Categories