Senior Cyber Security Configuration Management

Fannie Mae • Reston, VA

10d • $109,000 - $142,000 • Onsite

About The Position

As a valued colleague on the Information Security Technology – Technology Assessment team, you will assess systems and networks and identify deviations from acceptable configurations. You will help manage the security configuration program and measure the effectiveness of defense-in-depth architecture against known vulnerabilities. The position has one opening and can be based in Fannie Mae’s Reston, Virginia office. For most roles, employees are expected to work onsite regularly, with the in-office cadence determined by the manager; proximity to the designated office is preferred unless the role is noted as remote. The role is identified as Senior Associate and is eligible to participate in a Fannie Mae incentive program, subject to its terms.

Requirements

• At least 2 years of experience in an information technology profession.
• Hands-on experience with CIS Benchmarks and cybersecurity industry best practices and frameworks.
• At least 2 years of experience identifying, managing, and/or resolving cybersecurity issues.
• Experience identifying cybersecurity risks and determining organizational risk levels using established cybersecurity techniques.
• Experience with one or more major cloud platforms: AWS, Microsoft Azure, or Google Cloud Platform (GCP).
• Working knowledge of network and endpoint security principles.
• Working knowledge of common workstation operating systems, including Windows, macOS, and Linux.
• Working knowledge of server operating systems, including Windows Server 2019/2022 and Linux distributions such as SUSE and RHEL.
• Ability to use generative AI tools such as ChatGPT, Claude, and Google Gemini to automate and streamline manual data processes.
• Experience managing security findings, incidents, or IT tickets through an end-to-end operational process.

Nice To Haves

• Bachelor’s degree or an equivalent combination of education and professional experience.
• Hands-on experience with one or more cybersecurity tools, including Visio, AppOmni, Tenable, and CrowdStrike.
• Expertise designing defense-in-depth application and infrastructure security architectures with security controls across multiple technology stacks.
• Ability to champion traditional and innovative security approaches in a large-scale enterprise environment.
• Experience architecting, implementing, and documenting security solutions across cloud and on-premises environments.
• Strong understanding of the cyber threat landscape and experience mitigating threats such as DDoS attacks, phishing, malicious payloads, cloud-based threats, and mobile device risks.
• Ability to collaborate across teams, influence stakeholders, and build consensus in complex or challenging environments.
• Experience leading and managing technical professionals, including direct reports with advanced cybersecurity expertise.
• Expert knowledge of enterprise security architecture patterns and best practices, including data masking, encryption, logging, and security controls.
• Experience with Windows Server and Linux administration and security.
• Knowledge of CIS Benchmarks and STIG security configuration standards.
• Experience using enterprise compliance and configuration scanning tools.
• Scripting experience with PowerShell and Bash; Python experience is beneficial.
• Experience with Group Policy (GPO), Ansible, and other configuration management technologies.
• Experience validating security and configuration findings, including false-positive analysis.
• Experience with security remediation and exception management processes.
• Experience with CMDB and asset reconciliation, including scan coverage analysis.
• Proficiency with reporting and data analysis tools such as Excel, Tableau, SQL, and Power BI, or equivalent technologies.

Responsibilities

• Collaborate with the team on assessments of systems and networks within the network environment.
• Identify where systems and networks deviate from acceptable configurations and policies.
• Contribute to managing the security configuration program.
• Measure the effectiveness of defense-in-depth architecture against known vulnerabilities.

Benefits

• Broad range of health, life, voluntary lifestyle, and other benefits and perks supporting physical, mental, emotional, and financial well-being.
• Eligibility to participate in a Fannie Mae incentive program, subject to its terms.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed