Security Platform Engineer, Level 2

Nordstrom

Security Platform Engineer II responsible for engineering and operations of Nordstrom's enterprise security platform. Collaborating with various teams to ensure platform health and evolution.

Posted 6/27/2026full-timeSeattle • Washington • 🇺🇸 United StatesMid-LevelSenior💰 $121,500 - $188,500 per yearWebsite

Tech Stack

Tools & technologies

CloudDockerJavaScriptKubernetesNode.jsPythonSplunkTerraform

About the role

Key responsibilities & impact

Provide engineering and sustainment support across the full SPE platform portfolio — including EDR, DLP, data encryption, email security, CSPM, and SIEM — ensuring platforms are highly available, performant, and cost-effective.
Partner with IT, infrastructure, and application teams to maintain seamless security platform integrations across Nordstrom’s hybrid on-prem, cloud, and retail store environments.
Monitor and maintain platform health metrics — including EDR, Qualys, and Tanium agent coverage — and contribute to Monthly Business/Program Reviews (MBR/MPR) reporting.
Manage security platform migrations, upgrades, and configuration changes with minimal business disruption; develop and execute detailed test plans for platform changes.
Participate in an on-call rotation for platform-related incidents and support Threat Intel, CSIRT/SOC teams during security events requiring platform investigation or response.
Design, develop, and maintain automation tooling and CI/CD pipelines that improve platform deployment, configuration management, and operational efficiency.
Write and maintain engineering-level documentation including architecture decisions, runbooks, deployment guides, and test plans.
Contribute to the development of in-house tooling using Python, Bash, and NodeJS to automate repetitive operational tasks and reduce manual toil across the platform portfolio.
Apply infrastructure-as-code practices (Terraform) and containerization (Docker, Kubernetes) where applicable to platform deployment and management.
Leverage AI tooling — including GitHub Copilot and Claude — to accelerate engineering workflows and improve team productivity.
Partner with Threat Intel & Detection Engineering, SOC and CSIRT teams to ensure platform configurations align with active detection and incident response requirements.
Collaborate with GRC teams to ensure security platforms meet compliance requirements across NIST CSF, PCI DSS, SOC 1/2, and related frameworks.
Communicate clearly and effectively with technical and non-technical stakeholders across engineering, IT, and business teams.
Mentor junior engineers in both technical skills and engineering best practices; contribute to a culture of knowledge sharing and continuous improvement.

Requirements

What you’ll need

Minimum 3 years of experience in security platform engineering, security operations, or related technical roles supporting mission-critical systems.
Minimum 2 years of hands-on experience with scripting or programming languages — preferably Python, Bash, or NodeJS/JavaScript.
Experience with enterprise security platforms across two or more of the following domains: endpoint security (EDR/XDR), data loss prevention, data encryption, email security, CSPM, or SIEM.
Working knowledge of security frameworks and standards including MITRE ATT&CK, NIST CSF, PCI DSS, and CIS Controls.
Demonstrated ability to analyse log data, security alerts, and platform telemetry; Splunk or equivalent SIEM experience required.
Experience developing automation tooling or contributing to CI/CD pipelines in an engineering environment.
Strong written and oral communication skills; ability to translate technical concepts clearly for non-technical stakeholders.
Advanced understanding of systems design principles, technical architecture, and a track record of platform implementation and support.

Benefits

Comp & perks

Medical/Vision, Dental, Retirement and Paid Time Away
Life Insurance and Disability
Merchandise Discount and EAP Resources
This position may be eligible for performance-based incentives/bonuses
Benefits include 401k, medical/vision/dental/life/disability insurance options, PTO accruals, Holidays, and more.

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

PythonBashNodeJSTerraformDockerKubernetesEDRSIEMautomation toolingCI/CD

Soft Skills

communicationmentoringcollaborationanalytical skillsknowledge sharingcontinuous improvement