Senior Security Engineer at Nordstrom

Compensation

$142,000 – $220,500/yr

Setup: Remote, Hybrid
Type: Full-time
Level: Senior

Description

The Senior Security Engineer will join the TIDE team as a hybrid practitioner responsible for designing, developing, and maintaining high-fidelity detection rules using CrowdStrike NG-SIEM (LogScale/CQL). The role involves conducting threat intelligence collection and analysis, executing hypothesis-driven threat hunts, providing technical support for complex incidents, building automation to enhance detection and incident response, and mentoring junior team members.

Required Skills

CrowdStrike NG-SIEM (LogScale/CQL)
MITRE ATT&CK
EDR analysis
behavioral anomaly detection
threat hunting
Scripting proficiency in Python and/or PowerShell
AI tools

Additional Information

Required Previous Experiences: 4+ years of professional experience in detection engineering, threat intelligence, SOC/IR, threat hunting, or security automation
Preferred Qualifications: Familiarity with identity attack patterns including AiTM, MFA fatigue, session hijacking, token replay, and adversarial abuse of SSO and federated identity platforms
Experience with enterprise email security platforms and email-based threat detection including phishing, BEC, and malicious delivery mechanisms
Exposure to SOAR platforms and workflow automation (CrowdStrike Fusion or equivalent)
Experience with threat intelligence platforms (MISP, ThreatConnect, Recorded Future) and structured intel formats (STIX/TAXII)
Knowledge of detection-as-code practices, version control (Git), and CI/CD integration for detection deployment
Experience with cloud security telemetry (Azure, AWS) and cloud-native attack detection
Demonstrated use of AI tools to accelerate detection development, security operations, or threat research
Intermediate or advanced certifications such as GIAC GCIA, GCIH, GCTI, GDAT, or equivalent