Senior Manager - Cyber Security Platform (Hybrid - Seattle)

Nordstrom Inc.•Seattle, WA

45d•Hybrid

About The Position

We are seeking an experienced and strategic Senior Manager of Security Platform Engineering to lead our security platform engineering team. This role is responsible for managing and enhancing our comprehensive suite of security controls and platforms that protect Nordstrom's enterprise environment. The ideal candidate will drive technical strategy for security tooling, optimize platform performance, and lead initiatives to consolidate, integrate and modernize our security infrastructure while building a high-performing engineering team. You will collaborate across the organization to ensure the seamless implementation and operation of critical security controls that protect our business, employees, customers, and data.

Requirements

Bachelor's degree in Computer Science, Information Security, or related field-or equivalent practical experience.
8+ years of experience in information security or cybersecurity with a focus on security engineering, architecture, or operations.
3-5 years of experience in security management roles with a track record of leading high-performing technical teams.
Deep understanding of enterprise security architecture and technologies, particularly in the areas of endpoint protection, data security, and monitoring.
Experience leading complex security platform implementations, migrations, or upgrades in enterprise environments.
Strong knowledge of security frameworks and standards (e.g., NIST CSF, ISO 27001, CIS Controls).
Excellent leadership, strategic thinking, and communication skills.
Proven ability to translate security requirements into practical technical solutions.

Nice To Haves

Master's degree in a relevant field.
Experience with cloud security platforms and securing hybrid environments.
Relevant industry certifications (e.g., CISSP, CISM, CCSP, AWS Security).
Experience with DevOps practices and security automation.
Understanding of retail or e-commerce security challenges.
Experience with security platforms such as CrowdStrike, Microsoft Defender, Splunk, or similar enterprise security tools.
Background in software engineering or development.

Responsibilities

Develop and execute a strategic roadmap for security platforms across multiple domains, including endpoint protection, cloud security (or CSPM), data protection, email security, and logging/monitoring systems.
Drive consolidation and modernization initiatives to simplify and streamline security tooling while enhancing protection capabilities and reducing operational overhead.
Create multi-quarter implementation plans that align with enterprise security vision and business objectives.
Identify and prioritize security platform enhancements based on emerging threats, business requirements, and technology trends.
Establish meaningful security metrics that demonstrate business value and track platform effectiveness.
Partner with security leadership to translate organizational security strategy into actionable platform implementation plans.
Lead the design, implementation, and lifecycle management of enterprise security platforms including EDR, AV, DLP, encryption, SIEM, CSPM, email security, and related technologies.
Oversee RFP processes and technical evaluations for new security tools, ensuring alignment with security requirements and business needs.
Manage complex security platform migrations and upgrades with minimal business disruption.
Establish and maintain security platform standards, best practices, and architectural patterns.
Develop processes for continuous improvement of security platform operations, stability, and effectiveness.
Partner with IT, infrastructure, and application teams to ensure security platform integration across enterprise environments.
Oversee incident response for platform-related security events and drive root cause analysis and remediation efforts.
Build, lead, and mentor a diverse team of security platform engineers across operational support and core engineering functions.
Establish team structure that optimizes for both operational excellence and strategic platform innovation.
Create individual development plans that align with team members' career aspirations and organizational needs.
Implement performance management frameworks that recognize achievements and address development areas.
Foster a collaborative culture that encourages knowledge sharing, continuous learning, partnership, and innovation.
Identify and develop emerging leaders within the team to build succession pipelines.
Promote inclusive team practices that value diverse perspectives and approaches.
Build strategic partnerships with key stakeholders across IT, engineering, and business units.
Represent security platform needs in cross-functional initiatives and steering committees.
Communicate complex security concepts effectively to both technical and non-technical audiences.
Negotiate and manage dependencies with partner teams to ensure successful security platform deployments.
Collaborate with governance, risk, and compliance teams to ensure security platforms meet regulatory requirements.
Partner with SOC and incident response teams to ensure roadmaps and platform capabilities support detection and response needs (or requirements).
Advocate for security platform requirements in enterprise architecture and technology standards.