Freddie Mac Hiring for Information Security – Vulnerability Management Senior Job at McLean, VA Full Time

Employees, contingent workers and visitors are no longer required to show proof of vaccination to be on-site. Effective January 2023, Freddie Mac’s hybrid work arrangement is 3 days in the office (specifically Tuesday, Wednesday & Thursday).

Position Overview:

Is Information Security your passion? If so, our IS team engages with multiple areas – risk, compliance, business area management, technology owners and external partners. You will be a key part of the information security team that identifies and produces vulnerability management and risk assessment reports in support of Freddie Mac’s Security Assurance Program! The position will provide timely and quality service to ensure that IS vulnerabilities and misconfigurations are adequately identified, communicated, and tracked for remediation. You will also support information security needs to align with organization’s goals in risk mitigation strategies via metrics and reporting. This will include both direct and indirect support of customer needs and requirements. Potential tasks include analyzing threats and vulnerabilities, presenting risks associated with vulnerabilities, and supporting customers in risk remediation strategies!

Our Impact:

• The Vulnerability Management team is responsible for all aspects of scanning, ingesting, analyzing, and reporting information security vulnerabilities across all infrastructure and network devices, operating systems, and databases (on-premises and in-cloud) for all of FM.

Your Impact:

• Develop, maintain, and run advance reporting, dashboards, and analytical results
• Evaluate and define functional requirements for analytics and Business Intelligence solutions.
• Validate vulnerabilities and misconfigurations via scripts and SQL Queries
• Assist communications and partner engagements in communicating vulnerabilities to system owners.
• Monitor various sources for identifying threats and vulnerabilities on a continuous basis – including, commercial and Opensource tools
• Carry out business Engagement and partner communications on outstanding vulnerabilities, issues, and concerns.
• Carry out business engagements and form positive relationships on information security issues relevant to the business such as how to securely implement customer-facing technologies and how to appropriately protect customer information.
• Develop and maintain standard operating procedures, rules of engagement and status reporting of each assessment and task.
• Monitor and assess responses from lines of business and efforts to remediate risks
• Effectively communicate metrics and other vulnerability reports with business partners.
• Establish and maintain business relationships with individual contributors as well as management

Qualifications:

• 5+ related experience in Cyber Security/Information Security, Vulnerability Management, Network Security, Endpoint Security
• Bachelor’s Degree in Information Technology or related field or equivalent work experience.
• Experienced in Reporting tools like SQL, Tableau, etc.
• Experience implementing and using various IA tools including vulnerability assessment, patch management, audit collection, audit review, audit management, and end-point protection
• Experience with collecting, analyzing, and interpreting qualitative and quantitative data from various sources for the purposes of detailing results and analyzing findings to provide sophisticated threat intelligence.
• Validated understanding of computer networking concepts, communication protocols, primary threat actor attack methods and tools.
• Ability to understand and learn technical specifications, system requirements and other application design information as needed.
• Excellent analytical skills and attention to detail.
• Strong written communication skills including experience with reports and presentations for executive audiences.

Keys to Success in this Role:

• Information Security/IT Background
• Superb Communication, partner management skills
• Understand and work optimally with diverse IT and Business groups
• Financial services experience
• CISSP or security-related certification is desirable. Other relevant security certifications will be considered such as CEH, GCIH and GIAC.

Current Freddie Mac employees please apply through the internal career site.

Today, Freddie Mac makes home possible for one in four home borrowers and is one of the largest sources of financing for multifamily housing. Join our smart, creative and dedicated team and you’ll do important work for the housing finance system and make a difference in the lives of others.

We are an equal opportunity employer and value diversity and inclusion at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, disability status or any other characteristic protected by applicable law. We will ensure that individuals with differing abilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.

Notice to External Search Firms: Freddie Mac partners with BountyJobs for contingency search business through outside firms. Resumes received outside the BountyJobs system will be considered unsolicited and Freddie Mac will not be obligated to pay a placement fee. If interested in learning more, please visit www.BountyJobs.com and register with our referral code: MAC.

Time-type:Full time

Job Category:Information Technology

FLSA Status:Exempt

Freddie Mac provides anticipated base salary ranges where required by law.