Senior Cyber Security Configuration Management

Fannie Mae • Reston, VA

11d • $109,000 - $142,000

About The Position

As a valued colleague on Fannie Mae’s team, you will assess systems and networks and identify deviations from acceptable configurations. You will collaborate on assessments across the network environment, contribute to managing the security configuration program, and measure the effectiveness of defense-in-depth architecture against known vulnerabilities. The position has one opening and can be based in Fannie Mae’s Reston, Virginia office.

Requirements

• At least 2 years of experience in an Information Technology profession.
• Hands-on experience with CIS Benchmarks and cybersecurity industry best practices and frameworks.
• At least 2 years of experience identifying, managing, and/or resolving cybersecurity issues.
• Experience identifying cybersecurity risks and determining organizational risk levels using established cybersecurity techniques.
• Experience with one or more major cloud platforms: AWS, Microsoft Azure, or Google Cloud Platform (GCP).
• Working knowledge of network and endpoint security principles.
• Working knowledge of workstation operating systems, including Windows, macOS, and Linux.
• Working knowledge of server operating systems, including Windows Server 2019/2022 and Linux distributions such as SUSE and RHEL.
• Ability to use generative AI tools such as ChatGPT, Claude, and Google Gemini to automate and streamline manual data processes.
• Experience managing security findings, incidents, or IT tickets through an end-to-end operational process.

Nice To Haves

• Bachelor’s degree or an equivalent combination of education and professional experience.
• Hands-on experience with one or more cybersecurity tools, including Visio, AppOmni, Tenable, and CrowdStrike.
• Expertise designing defense-in-depth application and infrastructure security architectures, incorporating security controls across multiple technology stacks.
• Ability to champion traditional and innovative security approaches to protect a large-scale enterprise environment.
• Experience architecting, implementing, and documenting security solutions across cloud and on-premises environments.
• Strong understanding of the cyber threat landscape and experience mitigating threats such as DDoS attacks, phishing, malicious payloads, cloud-based threats, and mobile device risks.
• Ability to collaborate across teams, influence stakeholders, and build consensus in complex or challenging environments.
• Experience leading and managing technical professionals, including direct reports with advanced cybersecurity expertise.
• Expert knowledge of enterprise security architecture patterns and best practices, including data masking, encryption, logging, and security controls.
• Experience with Windows Server and Linux administration and security.
• Knowledge of CIS Benchmarks and STIG security configuration standards.
• Experience using enterprise compliance and configuration scanning tools.
• Scripting experience with PowerShell and Bash; Python experience is beneficial.
• Experience with Group Policy (GPO), Ansible, and other configuration management technologies.
• Experience validating security and configuration findings, including false-positive analysis.
• Experience with security remediation and exception management processes.
• Experience with CMDB and asset reconciliation, including scan coverage analysis.
• Proficiency with reporting and data analysis tools such as Excel, Tableau, SQL, and Power BI, or equivalent technologies.

Responsibilities

• Collaborate with the team on assessments of systems and networks within the network environment.
• Identify where systems and networks deviate from acceptable configurations and policies.
• Contribute to managing the security configuration program.
• Measure the effectiveness of defense-in-depth architecture against known vulnerabilities.

Benefits

• Broad range of health, life, voluntary lifestyle, and other benefits and perks supporting physical, mental, emotional, and financial well-being.
• Eligible to participate in a Fannie Mae incentive program, subject to program terms.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed