OPT Security Analyst Jobs
Security Analyst roles are a strong fit for F-1 OPT students with degrees in cybersecurity, computer science, or information systems. Most positions qualify as STEM OPT extensions, giving you up to 36 months of work authorization. Employers in this field include financial institutions, defense contractors, and technology companies.
Find OPT Security Analyst JobsOverview
Showing 5 of 272+ Security Analyst jobs
See all 272+ Security Analyst Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Security Analyst roles.
Get Access To All JobsJob Description
This position is offered as a hybrid role in the Seattle, WA area. You must be willing to work in office at the Nordstrom Seattle office for a minimum of 4 days per week to be considered for this position.
The Senior Attack Surface Analyst leads the triage of Nordstrom’s external attack surface through data-driven analysis of cloud, on-prem, and third-party exposures. This role drives down attack surface risk through risk-based prioritization, process improvement, and hands-on remediation guidance for partner teams.
Key Responsibilities
- Lead the maintenance and growth of attack surface management tools and the reporting ecosystem: troubleshoot escalated tool and script failures, identify coverage and process gaps, develop solutions, and contribute to the design and implementation of net-new capabilities.
- Drive process automation leveraging AI enablement to streamline attack surface discovery, triage, and remediation workflows, reducing manual effort and accelerating time to risk reduction.
- Lead the triage of critical vulnerability findings with partner teams and stakeholders, analyzing the risk of emergent vulnerabilities and patch releases and coordinating response for expedited remediation as needed.
- Map and document Nordstrom’s attack surface in collaboration with network and offensive security teams, through regular OSINT and reconnaissance activities, discovery scans, and dark web monitoring resources.
- Correlate data across vulnerability identification, cloud security posture management (CSPM), asset inventory (CMDB), and threat intelligence sources to prioritize vulnerabilities and exposures by risk.
- Collaborate with cybersecurity peers, technology partner teams, and other stakeholders to reduce the attack surface by researching and guiding appropriate mitigation and remediation.
- Author enterprise-level communications, custom reports, dashboards, and metrics on the highest-risk vulnerabilities and recommended mitigation strategies.
- Develop, monitor, and troubleshoot automation of operational processes and tool integrations.
- Maintain Cybersecurity Standards, Attack Surface Management standard operating procedures, and runbooks.
- Engage with the cybersecurity community and threat intelligence sources to share and consume the latest information on threats, attack vectors, and remediation workarounds.
- Support regulatory and compliance requirements (e.g., PCI, SOC2), including capturing evidence and artifacts related to vulnerability scanning and reporting.
- Develop teammates’ domain expertise through mentorship, presentations, and knowledge-sharing sessions, and build your own through trainings, industry presentations, and certifications.
Qualifications
Required
- 4+ years in security operations, vulnerability management, network security, system administration, or related fields.
- Advanced knowledge of networking, system administration, cloud services, asset management, and cybersecurity principles.
- Expertise across cybersecurity domains including vulnerability management, cloud security, attack surface management, network security, and cyber hygiene.
- Working knowledge of OSINT techniques and reconnaissance methodologies.
- Experience implementing cybersecurity controls in multi-cloud environments (AWS, Azure, GCP).
- Familiarity with the MITRE ATT&CK framework, threat actor tactics, techniques, and procedures (TTPs), and common attack vectors.
- Deep understanding of the processes and controls needed to satisfy relevant regulatory and compliance requirements (e.g., PCI, SOC2) for vulnerability and attack surface management.
- Proficiency in scripting languages (e.g., Python, PowerShell) for process automation.
- Strong communication skills, including writing for technical and executive audiences.
- Bachelor’s or Master’s degree in Information Technology, Computer Science, Cybersecurity, or a related field; equivalent experience will be considered in lieu of a degree.
Preferred
- Proficiency in emerging AI technologies and their application within the attack surface management domain.
- Experience coaching or mentoring more junior analysts.
- Relevant certifications (e.g., Security+, GCIA, GCIH, GPEN, CISSP).
Pay Range Details
The pay range(s) below has been provided in compliance with state specific laws. Pay ranges may be different for other locations.
Pay offers are dependent on the location, as well as job-related knowledge, skills, and experience.
$142,000.00 - $220,500.00 Annual
We’ve got you covered…
Our employees are our most important asset and that’s reflected in our benefits. Nordstrom is proud to offer a variety of benefits to support employees and their families, including:
- Medical/Vision, Dental, Retirement and Paid Time Away
- Life Insurance and Disability
- Merchandise Discount and EAP Resources
This position may be eligible for performance-based incentives/bonuses. Benefits include 401k, medical/vision/dental/life/disability insurance options, PTO accruals, Holidays, and more. Eligibility requirements may apply based on location, job level, classification, and length of employment. Learn more in the Nordstrom Benefits Overview by copying and pasting the following URL into your browser: https://careers.nordstrom.com/pdfs/Ben_Overview_17-19.pdf
A few more important points...
The job posting highlights the most critical responsibilities and requirements of the job. It’s not all-inclusive. There may be additional duties, responsibilities and qualifications for this job.
For Los Angeles or San Francisco applicants: Nordstrom is required to inform you that we conduct background checks after conditional offer and consider qualified applicants with criminal histories in a manner consistent with legal requirements per Los Angeles, Cal. Muni. Code 189.04 and the San Francisco Fair Chance Ordinance. For additional state and location specific notices, please refer to the Legal Notices document within the FAQ section of the Nordstrom Careers site.
Applicants with disabilities who require assistance or accommodation should contact the nearest Nordstrom location, which can be identified at www.nordstrom.com.
Please be mindful that there may be legal notices and requirements related to this job posting that are specific to your state. Review the Career Site FAQ’s for relevant information and guidelines.
Current Nordstrom employees: To apply, log into Workday, click the Careers button and then click Find Jobs.
Nordstrom keeps job postings open for at least one day after the posting date.
© 2026 Nordstrom, Inc
Job Description
This position is offered as a hybrid role in the Seattle, WA area. You must be willing to work in office at the Nordstrom Seattle office for a minimum of 4 days per week to be considered for this position.
The Senior Attack Surface Analyst leads the triage of Nordstrom’s external attack surface through data-driven analysis of cloud, on-prem, and third-party exposures. This role drives down attack surface risk through risk-based prioritization, process improvement, and hands-on remediation guidance for partner teams.
Key Responsibilities
- Lead the maintenance and growth of attack surface management tools and the reporting ecosystem: troubleshoot escalated tool and script failures, identify coverage and process gaps, develop solutions, and contribute to the design and implementation of net-new capabilities.
- Drive process automation leveraging AI enablement to streamline attack surface discovery, triage, and remediation workflows, reducing manual effort and accelerating time to risk reduction.
- Lead the triage of critical vulnerability findings with partner teams and stakeholders, analyzing the risk of emergent vulnerabilities and patch releases and coordinating response for expedited remediation as needed.
- Map and document Nordstrom’s attack surface in collaboration with network and offensive security teams, through regular OSINT and reconnaissance activities, discovery scans, and dark web monitoring resources.
- Correlate data across vulnerability identification, cloud security posture management (CSPM), asset inventory (CMDB), and threat intelligence sources to prioritize vulnerabilities and exposures by risk.
- Collaborate with cybersecurity peers, technology partner teams, and other stakeholders to reduce the attack surface by researching and guiding appropriate mitigation and remediation.
- Author enterprise-level communications, custom reports, dashboards, and metrics on the highest-risk vulnerabilities and recommended mitigation strategies.
- Develop, monitor, and troubleshoot automation of operational processes and tool integrations.
- Maintain Cybersecurity Standards, Attack Surface Management standard operating procedures, and runbooks.
- Engage with the cybersecurity community and threat intelligence sources to share and consume the latest information on threats, attack vectors, and remediation workarounds.
- Support regulatory and compliance requirements (e.g., PCI, SOC2), including capturing evidence and artifacts related to vulnerability scanning and reporting.
- Develop teammates’ domain expertise through mentorship, presentations, and knowledge-sharing sessions, and build your own through trainings, industry presentations, and certifications.
Qualifications
Required
- 4+ years in security operations, vulnerability management, network security, system administration, or related fields.
- Advanced knowledge of networking, system administration, cloud services, asset management, and cybersecurity principles.
- Expertise across cybersecurity domains including vulnerability management, cloud security, attack surface management, network security, and cyber hygiene.
- Working knowledge of OSINT techniques and reconnaissance methodologies.
- Experience implementing cybersecurity controls in multi-cloud environments (AWS, Azure, GCP).
- Familiarity with the MITRE ATT&CK framework, threat actor tactics, techniques, and procedures (TTPs), and common attack vectors.
- Deep understanding of the processes and controls needed to satisfy relevant regulatory and compliance requirements (e.g., PCI, SOC2) for vulnerability and attack surface management.
- Proficiency in scripting languages (e.g., Python, PowerShell) for process automation.
- Strong communication skills, including writing for technical and executive audiences.
- Bachelor’s or Master’s degree in Information Technology, Computer Science, Cybersecurity, or a related field; equivalent experience will be considered in lieu of a degree.
Preferred
- Proficiency in emerging AI technologies and their application within the attack surface management domain.
- Experience coaching or mentoring more junior analysts.
- Relevant certifications (e.g., Security+, GCIA, GCIH, GPEN, CISSP).
Pay Range Details
The pay range(s) below has been provided in compliance with state specific laws. Pay ranges may be different for other locations.
Pay offers are dependent on the location, as well as job-related knowledge, skills, and experience.
$142,000.00 - $220,500.00 Annual
We’ve got you covered…
Our employees are our most important asset and that’s reflected in our benefits. Nordstrom is proud to offer a variety of benefits to support employees and their families, including:
- Medical/Vision, Dental, Retirement and Paid Time Away
- Life Insurance and Disability
- Merchandise Discount and EAP Resources
This position may be eligible for performance-based incentives/bonuses. Benefits include 401k, medical/vision/dental/life/disability insurance options, PTO accruals, Holidays, and more. Eligibility requirements may apply based on location, job level, classification, and length of employment. Learn more in the Nordstrom Benefits Overview by copying and pasting the following URL into your browser: https://careers.nordstrom.com/pdfs/Ben_Overview_17-19.pdf
A few more important points...
The job posting highlights the most critical responsibilities and requirements of the job. It’s not all-inclusive. There may be additional duties, responsibilities and qualifications for this job.
For Los Angeles or San Francisco applicants: Nordstrom is required to inform you that we conduct background checks after conditional offer and consider qualified applicants with criminal histories in a manner consistent with legal requirements per Los Angeles, Cal. Muni. Code 189.04 and the San Francisco Fair Chance Ordinance. For additional state and location specific notices, please refer to the Legal Notices document within the FAQ section of the Nordstrom Careers site.
Applicants with disabilities who require assistance or accommodation should contact the nearest Nordstrom location, which can be identified at www.nordstrom.com.
Please be mindful that there may be legal notices and requirements related to this job posting that are specific to your state. Review the Career Site FAQ’s for relevant information and guidelines.
Current Nordstrom employees: To apply, log into Workday, click the Careers button and then click Find Jobs.
Nordstrom keeps job postings open for at least one day after the posting date.
© 2026 Nordstrom, Inc
See all 272+ OPT Security Analyst Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new OPT Security Analyst Jobs.
Get Access To All JobsTips for Finding OPT Sponsorship as a Security Analyst
Lead with your security clearance eligibility
Many Security Analyst roles require or prefer candidates eligible for U.S. security clearances. As an F-1 OPT student, you're generally not eligible for clearances, so target commercial sector roles at banks, cloud providers, and healthcare companies instead.
Emphasize STEM OPT eligibility upfront
Cybersecurity and information systems degrees typically qualify for the 24-month STEM OPT extension. Mention this early in your cover letter and interviews so employers understand you have up to 36 months of work authorization without H-1B visa sponsorship immediately.
Target employers with established OPT hiring tracks
Large financial institutions, healthcare systems, and technology companies hire Security Analysts regularly and have HR teams familiar with OPT work authorization. Smaller firms without dedicated compliance staff often decline OPT candidates due to unfamiliarity, not unwillingness.
Certifications compensate for experience gaps
CompTIA Security+, CEH, or AWS Security certifications signal job-readiness to employers who may hesitate on OPT candidates. Holding a recognized certification before applying reduces perceived hiring risk and strengthens your application against candidates with more work history.
Address your OPT timeline proactively
Prepare a clear one or two sentence explanation of your authorization status and end date. Employers unfamiliar with OPT often overestimate complexity. Framing it as straightforward employer registration through E-Verify removes a common objection before it becomes a reason to pass.
Build a portfolio of practical security work
Capture threat analysis reports, vulnerability assessments, or CTF competition writeups in a portfolio. Security Analyst hiring managers evaluate analytical judgment directly, and documented practical work strengthens your case significantly when your U.S. work experience is limited by OPT timing.
Security Analyst OPT: Frequently Asked Questions
Do Security Analyst jobs qualify for the STEM OPT extension?
Most Security Analyst positions qualify for the 24-month STEM OPT extension if your degree is in cybersecurity, computer science, information systems, or a related STEM field. The role itself must be directly related to your degree program. Confirm your degree's CIP code qualifies with your Designated School Official before applying, since the extension is tied to your field of study, not just the job title.
Will security clearance requirements block me from Security Analyst roles on OPT?
Many government-facing and defense contractor roles require U.S. security clearances that F-1 OPT students are not eligible for. This eliminates a portion of the Security Analyst market, but a substantial number of commercial sector roles at banks, cloud providers, healthcare systems, and SaaS companies carry no clearance requirement. Filtering your search to private sector employers opens up the majority of available positions. Migrate Mate lists OPT-eligible Security Analyst roles in the commercial sector.
Can I start a Security Analyst job before my OPT EAD card arrives?
No. You cannot begin working as a Security Analyst, or any paid role, until your EAD card is in hand and your OPT start date has been reached. Apply early and account for USCIS processing times of three to five months. Some students apply for OPT up to 90 days before their program end date to minimize the gap between graduation and when they can legally start work.
What happens to my OPT authorization if I get laid off from a Security Analyst role?
F-1 OPT students on post-completion OPT can accumulate up to 90 days of unemployment, or 150 days if on STEM OPT extension. A layoff counts toward that limit from your last day of employment. Report the job change to your DSO immediately and begin your search right away. Staying under the unemployment cap is critical to maintaining valid F-1 status.
Do Security Analyst employers need to do anything special to hire me on OPT?
For standard OPT, employers must enroll in E-Verify if they want to hire a STEM OPT extension student. For initial OPT, E-Verify is not required, but most large employers already participate. Your employer also needs to sign a training plan form as part of the STEM OPT extension application. Walking your HR contact through this process clearly, and early, significantly improves your chances of moving forward in the hiring process.