Senior Cyber Threat Engineer

Playing an essential role in the U.S. economy, Fannie Mae is foundational to housing finance. Here, your expertise can help fuel purpose-driven innovation that expands access to homeownership and affordable rental housing across the country. Join Fannie Mae to grow your career and help people find a place to call home.

Job Description

As a valued colleague on our team, you will collect information about threat actor activity, moderately complex vulnerabilities, and ongoing adversarial campaigns from both internal and external sources with support of management.

THE IMPACT YOU WILL MAKE

The Defense and Response - Cyber Intelligence - Senior Associate role will offer you the flexibility to make each day your own, while working alongside people who care so that you can deliver on the following responsibilities:

• Stay current on cybersecurity threats to the organization and the industry.
• Share news resources with colleagues.
• Work with other organizations to determine possible threats.
• Analyze information within the context of the Company and its cybersecurity measures.
• Translate findings for internal cybersecurity groups

• 2 years of experience

• Bachelor's degree or equivalent
• Sec+, CYSA+, SANS certifications
• Pentest & OSINT experience

• Skills related to Influencing including negotiating, persuading others, facilitating meetings, and resolving conflict
• Skills related to Relationship Management including managing and engaging stakeholders, customers, and vendors, building relationship networks, contracting, etc.
• Skills related to Risk Assessment and Management including evaluating and designing controls, conducting impact assessments, identifying control gaps, remediating risk, etc.
• Skills related to Security including designing and evaluating security systems, identifying security threats, securing computers, assessing vulnerability, etc.
• Experience gathering accurate information to explain concepts, answer critical questions, and provide challenging or alternative analysis
• The group of skills related to performing threat analysis including all-source tradecraft, technical threat analysis, threat prioritization, attack surface analysis
• The group of skills related to Programming including coding, debugging, and using relevant programming languages
• The group of skills related to Communication including communicating in writing or verbally, copywriting, planning and distributing communication, etc.
• Experience identifying measures, or indicators of system performance, and the actions needed to improve or correct performance to achieve desired outcomes
• Experience determining levels of risk to an organization's networks using cybersecurity techniques and tools such as threat hunting, and intel
• Experience in the process of analyzing data to identify trends or relationships to inform conclusions about the data