Security Platform Engineer ; Hybrid - Seattle

Job Description

As a Security Platform Engineer II, you will be a core technical contributor on the Security Platform Engineering team — responsible for the engineering, operations, and continuous improvement of the enterprise security platform portfolio that protects Nordstrom’s retail, e-commerce, and cloud environments. You will work across a broad portfolio of security platforms spanning endpoint protection, data security, cloud security, email security, and logging — partnering with Threat Intel & Detection Engineering, Cloud Engineering, IT, SOC, and GRC teams to maintain platform health and drive platform evolution.

• Provide engineering and sustainment support across the full SPE platform portfolio — including EDR, DLP, data encryption, email security, CSPM, and SIEM — ensuring platforms are highly available, performant, and cost-effective.
• Partner with IT, infrastructure, and application teams to maintain seamless security platform integrations across Nordstrom’s hybrid on-prem, cloud, and retail store environments.
• Monitor and maintain platform health metrics — including EDR, Qualys, and Tanium agent coverage — and contribute to Monthly Business/Program Reviews (M /MPR) reporting.
• Manage security platform migrations, upgrades, and configuration changes with minimal business disruption; develop and execute detailed test plans for platform changes.
• Participate in an on‑call rotation for platform‑related incidents and support Threat Intel, CSIRT/SOC teams during security events requiring platform investigation or response.

• Design, develop, and maintain automation tooling and CI/CD pipelines that improve platform deployment, configuration management, and operational efficiency.
• Write and maintain engineering‑level documentation including architecture decisions, runbooks, deployment guides, and test plans.
• Contribute to the development of in‑house tooling using Python, Bash, and NodeJS to automate repetitive operational tasks and reduce manual toil across the platform portfolio.
• Apply infrastructure‑as‑code practices (Terraform) and containerization (Docker, Kubernetes) where applicable to platform deployment and management.
• Leverage AI tooling — including Git Hub Copilot and Claude — to accelerate engineering workflows and improve team productivity.

• Partner with Threat Intel & Detection Engineering, SOC and CSIRT teams to ensure platform configurations align with active detection and incident response requirements.
• Collaborate with GRC teams to ensure security platforms meet compliance requirements across NIST CSF, PCI DSS, SOC 1/2, and related frameworks.
• Communicate clearly and effectively with technical and non‑technical stakeholders across engineering, IT, and business teams.
• Mentor junior engineers in both technical skills and engineering best practices; contribute to a culture of knowledge sharing and continuous improvement.

• You bring hands‑on experience in a large‑scale security, technology, or e‑commerce environment — and you understand the unique security challenges of hybrid retail environments.
• You’re a strong cross‑functional collaborator who builds trust with stakeholders at all levels, from engineers to executive leadership.
• You have a bias toward automation — when you see a repetitive manual process, your instinct is to eliminate it.
• You take ownership end to end: you don’t consider a platform 'done' when it's deployed; you care about its ongoing health, coverage, and evolution.
• You’re comfortable with ambiguity and can prioritize effectively in a fast‑paced environment with multiple competing demands.
• You’re genuinely interested in mentoring others and investing in the growth of the engineers around you.
• You bring an AI‑first mindset — you actively look for opportunities to integrate AI tools into your engineering workflow.

• Minimum 3 years of experience in security platform engineering, security operations, or related technical roles supporting mission‑critical systems.
• Minimum 2 years of hands‑on experience with scripting or programming languages —…