Senior Cyber Security Configuration Management

Playing an essential role in the U.S. economy, Fannie Mae is foundational to housing finance. Here, your expertise can help fuel purpose-driven innovation that expands access to homeownership and affordable rental housing across the country. Join Fannie Mae to grow your career and help people find a place to call home.

Job Description

As a valued colleague on our team, you will provide the assessment of systems and networks, and identify deviations from acceptable configurations.

THE IMPACT YOU WILL MAKE  

The Senior Cyber Security Configuration Management role will offer you the flexibility to make each day your own, while working alongside people who care so that you can deliver on the following responsibilities: 

• Collaborate with team on assessments of systems and networks within the network environment.

• Identify where systems/networks deviate from acceptable configurations and policies.

• Contribute to managing security configuration program.

• Measure effectiveness of defense-in-depth architecture against known vulnerabilities

There is 1 opening for this position which can be based in our Reston, VA office.

THE EXPERIENCE YOU BRING TO THE TEAM 

 Minimum Required Experience

• Minimum of 2 years of experience in an Information Technology profession.
• Hands-on experience with CIS Benchmarks and industry best practices and frameworks related to cybersecurity.
• Minimum of 2 years of experience identifying, managing, and/or resolving cybersecurity issues.
• Experience identifying cybersecurity risks and determining levels of risk to an organization using established cybersecurity techniques.
• Experience with one or more major cloud platforms, including AWS, Microsoft Azure, or Google Cloud Platform (GCP).
• Working knowledge of network and endpoint security principles.
• Working knowledge of common workstation operating systems, including Windows, macOS, and Linux.
• Working knowledge of server operating systems, including Windows Server 2019/2022 and Linux distributions such as SUSE and RHEL.
• Ability to leverage generative AI tools, such as ChatGPT, Claude, and Google Gemini, to automate and streamline manual data processes.
• Experience managing security findings, incidents, or IT tickets through an end-to-end operational process.

Desired Experiences 

• Bachelor’s degree or equivalent combination of education and professional experience.
• Hands-on experience with one or more cybersecurity tools, including Visio, AppOmni, Tenable, and CrowdStrike.
• Proven expertise designing defense-in-depth application and infrastructure security architectures, incorporating security controls across multiple technology stacks.
• Ability to champion both traditional and innovative security approaches to protect a large-scale enterprise environment.
• Demonstrated experience architecting, implementing, and documenting security solutions across cloud and on-premises environments.
• Strong understanding of the cyber threat landscape and experience mitigating threats such as DDoS attacks, phishing, malicious payloads, cloud-based threats, and mobile device risks.
• Demonstrated ability to collaborate across teams, influence stakeholders, and build consensus in complex or challenging environments.
• Experience leading and managing technical professionals, including direct reports with advanced cybersecurity expertise.
• Expert knowledge of enterprise security architecture patterns and best practices, including data masking, encryption, logging, and security controls.
• Experience with Windows Server and Linux administration and security.
• Knowledge of CIS Benchmarks and STIG security configuration standards.
• Experience using enterprise compliance and configuration scanning tools.
• Scripting experience with PowerShell and Bash; Python experience is beneficial.
• Experience with Group Policy (GPO), Ansible, and other configuration management technologies.
• Experience validating security and configuration findings, including false-positive analysis.
• Experience with security remediation and exception management processes.
• Experience with CMDB and asset reconciliation, including scan coverage analysis.
• Proficiency with reporting and data analysis tools such as Excel, Tableau, SQL, and Power BI, or equivalent technologies.

Information Security Technology - Technology Assessment - Senior Associate

109,000.00 - 142,000.00

JR3007

Qualifications

Education:

The future is what you make it to be. Discover compelling opportunities at Fanniemae.com/careers.

For most roles, employees are expected to work onsite on a regular basis at their designated office location. In-office work cadence is determined by your manager. Proximity within a reasonable commute to your designated office location is preferred unless the job is noted as open to remote.

Fannie Mae is an equal opportunity employer and considers qualified applicants for employment without regard to race, color, religion, sex, national origin, disability, age, sexual orientation, gender identity/gender expression, marital or parental status, or any other protected factor. Fannie Mae is committed to providing reasonable accommodations to qualified individuals with disabilities who are employees or applicants for employment, unless to do so would cause undue hardship to the company. If you need assistance using our online system and/or you need a reasonable accommodation related to the hiring/application process, please complete this form.

The hiring range for this role is set forth below. Final salaries will generally vary within that range based on factors that include but are not limited to, skill set, depth of experience, certifications, and other relevant qualifications. This position is eligible to participate in a Fannie Mae incentive program (subject to the terms of the program). As part of our comprehensive benefits package, Fannie Mae offers a broad range of Health, Life, Voluntary Lifestyle, and other benefits and perks that enhance an employee's physical, mental, emotional, and financial well-being. See more here.

Requisition compensation:

to