Common Securitization Solutions logo
Common Securitization Solutions

CSS manages the issuance and administration for Fannie Mae and Freddie Mac’s Single-Family Mortgage-Backed Security.

Director of Cyber Security Architecture, Engineering Services

Security EngineerSecurity EngineerFull TimeRemoteLeadTeam 201-500Since 2014H1B SponsorCompany SiteLinkedIn

Location

United States

Posted

10 days ago

Salary

$208.5K - $235.8K / year

Seniority

Lead

Bachelor Degree10 yrs expEnglishAWSCloudCyber Security

Job Description

Director of Cyber Security Architecture, Engineering Services

Common Securitization Solutions

• Lead the overall design of cyber security architecture, cyber security engineering and business architecture to ensure compliance with cyber security policies • Contribute to the overall security vision and strategy • Focus on improving operational efficiencies and reliability within Cyber Security tools ecosystem • Lead day-to-day management and execution of Cyber security architecture and engineering functions • Interface with IT professionals and business leaders to assess and manage cyber risk • Partner with leaders across the business to identify opportunities and risks and develop solutions • Refine, design, and implement company-wide cyber security architecture and engineering • Develop cyber security patterns for application design • Manage external assessment activities and present to senior leadership • Act as a subject matter expert for internal teams • Advise on cyber risk management activities and security best practices • Prototype new security tools and technologies and optimize existing tools • Ensure communication with peers in technology and business groups regarding security goals • Oversee deployment, integration, and configuration of cyber security solutions • Lead initiatives to share knowledge across teams • Document and measure the performance and effectiveness of the Information Security program.

Job Requirements

  • Bachelor’s degree or higher in related discipline
  • Industry Certification required, e.g. CISSP, CISA, CISM or equivalent designation
  • A minimum of 10 years of experience building and leading cybersecurity programs
  • A minimum of 5 years leading Security Architecture and Engineering Teams.
  • Applicants must be authorized to work in the US without requiring employer sponsorship currently or in the future.
  • Strong working knowledge of Cyber Security Architectural and Engineering principles supporting Cyber Defense, Compliance, Perimeter Security, Data Protection, Application Security, Operating System Security, Virtual Infrastructure, Storage Protection
  • Working knowledge of physical security
  • Experience adopting Zero Trust
  • Strong working knowledge of DevSecOps
  • Strong working knowledge of AWS and tools to support the Cloud
  • Strong working knowledge of Private Cloud, Public Cloud, and/or Hybrid Cloud
  • Experience working with Risk, Security or Audit frameworks (i.e., COBIT, COSO, ISO 27001/2, NIST 800-53, NIST CSF, AICPA, BITS).
  • Serve as subject matter expert for InfoSec and IT Security related topics with experience in technical control testing aligned to NIST 800-53, FISMA, and SOC.
  • Possesses strong analytical skills capable of identifying, evaluating and mitigating significant risks within an enterprise.
  • Demonstrated experience using and managing Risk Management tools is desired.
  • Strong working experience with Microsoft Office Suite and GRC tools.
  • Secondary mortgage market or equivalent financial services experience is an advantage.
  • Ability to document and explain risks and vulnerabilities to both business and technical stakeholders.
  • Ability to influence peers and management; ability to team cross-functionally and form relationships to achieve objectives.
  • Strong oral and written communication skills and ability to work well with others and in a collaborative, complex and fast paced environment.

Benefits

  • performance bonus
  • 401k match
  • healthcare coverage
  • PTO
  • broad range of other benefits

Related Categories

Related Job Pages

More Security Engineer Jobs

Full TimeRemoteTeam 5,001-10,000H1B Sponsor

• Advocating best practices for the customer and internal teams during product implementation, and providing customer feedback to the Product team • Being the central point of contact for customers and leading the integrated account team delivering customer success • Partnering with the business to review and ensure integration efficiency, high quality service and keep customers engaged • Identifying service enhancements and potential problems to ensure continuous improvements to quality of customer service delivery • Communicating with internal, external customers and partners to share information and deliverables

United Arab Emirates
Form3 logo

Senior Cloud Security Engineer

Form3

Form3 is a fully managed payment technology service that helps banks and regulated FinTech companies move money faster. A robust AWS cloud-processing platform featuring multiple-sc

Senior Cloud Security Engineer Location: Germany, Netherlands, Spain, Portugal & UK 100% Remote You’ll design, implement, and maintain defensive security controls that protect our high-availability, multi-cloud payment systems built on modern technologies. Your deep understanding of current threats, exploitation methods, and risk trade-offs will enable you to guide engineering teams on effective security features and ensure the right defensive measures are prioritised. WE’RE LOOKING FOR Essential - You live on the linux command line - Your current research and experience back up your opinionated views on security practices and tradeoffs, which you love to openly debate and willingly share - You’re sought after for your security engineering expertise, having built multiple security controls that are actively proven in large production estates - Your security expertise extends to at least one public cloud, including essential security features and long-term security hardening practices - You have a good grounding in Kubernetes security and have ideally developed complex, heavily customised multi-cluser environments - You appreciate building systems with good engineering practices and may have a background in software engineering at scale - You’re open to being a part of our on-call rota, ready to respond if we have a severe, platform-impacting security tooling failure or need second-line security incident response assistance Desirable - You have an interest in offensive security, potentially including participation in CTFs and past experience as a red team operator or pen tester - You’ve developed security configurations in multiple public and private clouds - You’re a confident presenter and have accelerated appreciation of security across engineering teams - You regularly support building and analysis of threat models using a well defined process - You have experience securing data centers and networking devices - You’re terrified by supply chain and CI/CD security, but have good patterns for reducing the risks - Your engineering experiences matches Form3’s tech stack – including Golang and Terraform TECH STACK ⚙️ - AWS, GCP, Azure and private Data Centers - Kubernetes, Helm, Flux - Distributed systems, mostly Golang based with CockroachDB and NATS - SIEM/SOAR, EDR, CNAPP, and a suite of open source tools with custom integrations THE TEAM You will join a team of defensive security engineers directly maintaining and expanding security controls as well as advising the wider platform and application engineers within our R&D team. We report into the CISO and work alongside the other functional pillars of InfoSec. HIRING LOCATIONS We are a remote-first organisation and are able to accept applications from the following countries; Germany, Netherlands, Spain, Portugal & UK

Germany + 4 moreAll locations: Germany | Netherlands | Spain | Portugal | United Kingdom
Form3 logo

Senior Cloud Security Engineer - Kubernetes

Form3

Form3 is a fully managed payment technology service that helps banks and regulated FinTech companies move money faster. A robust AWS cloud-processing platform featuring multiple-sc

Senior Cloud Security Engineer (Kubernetes) Location 100% Remote (UK/EU*) You will build and run defensive security controls for highly-available multi-cloud payment systems running the latest technology. You understand current threats, exploitation paths and risk tradeoffs in order to advise engineering teams on beneficial security features as well as prioritise management of defensive controls. WE’RE LOOKING FOR Essential - You live on the linux command line - Your current research and experience back up your opinionated views on security practices and tradeoffs, which you love to openly debate and willingly share - You’re sought after for your Kubernetes security expertise and have developed complex heavily customised multi-cluser environments - Your security expertise extends to at least one public cloud, including essential security features and long-term security hardening practices - You appreciate building systems with good engineering practices and may have a background in software engineering at scale - You’re open to being a part of our on-call rota, ready to respond if we have a severe, platform-impacting security tooling failure or need second-line security incident response assistance Desirable - You have an interest in offensive security, potentially including participation in CTFs and past experience as a red team operator or pen tester - You’ve developed security configurations in multiple public and private clouds - You’re a confident presenter and have accelerated appreciation of security across engineering teams - You regularly support building and analysis of threat models using a well defined process - You have experience securing data centers and networking devices - You’re terrified by supply chain and CI/CD security, but have good patterns for reducing the risks - Your engineering experiences matches Form3’s tech stack – including Golang and Terraform TECH STACK - AWS, GCP, Azure and private Data Centers - Kubernetes, Helm, Flux - Distributed systems, mostly Golang based with CockroachDB and NATS - SIEM/SOAR, EDR, CNAPP, and a suite of open source tools with custom integrations THE TEAM You will join a team of defensive security engineers directly maintaining and expanding security controls as well as advising the wider platform and application engineers within our R&D team. We report into the CISO and work alongside the other functional pillars of InfoSec. We are a remote-first organisation and are able to accept applications from the following countries; Germany, Netherlands, Spain, Portugal & UK

Germany + 4 moreAll locations: Germany | Netherlands | Spain | Portugal | United Kingdom
Ardent logo

IT Subject Matter Expert

Ardent

Your "ALL IN" Location Intelligence | Digital Transformation | Data Science & Analytics experts

Full TimeRemoteTeam 51-200Since 2008H1B Sponsor

Role Description Ardent is seeking an IT Subject Matter Expert to support enterprise IT initiatives within a federal environment. This role will provide technical expertise, operational support, and stakeholder coordination across enterprise systems, governance activities, and modernization efforts. The position will support technical initiatives requiring strong analytical, problem-solving, and enterprise IT experience. Responsibilities and Duties - Provide subject matter expertise supporting enterprise IT governance and modernization initiatives. - Support technical governance activities, operational planning, and strategic IT initiatives. - Provide recommendations regarding enterprise IT processes, systems, and operational improvements. - Collaborate with stakeholders, technical teams, and leadership to support program objectives. - Support development of technical documentation, reports, and briefings. - Assist with analysis of enterprise IT environments, systems, and operational requirements. - Participate in governance meetings, technical reviews, and planning discussions. - Provide guidance on IT standards, best practices, and operational processes. - Support coordination across technical and business teams to ensure alignment with program goals. - Contribute to continuous improvement and modernization efforts across enterprise IT operations. Qualifications - Bachelor’s degree in Computer Science, Engineering, or related field. - Minimum of 10 years of experience in Information Technology environments. - Minimum of 4 years of experience supporting enterprise IT initiatives or enterprise-scale environments. - Experience supporting technical governance, enterprise IT operations, or modernization efforts. - Strong communication and stakeholder coordination skills. - Ability to support complex technical and operational initiatives in a federal environment. - Strong analytical, organizational, and problem-solving abilities. Preferred Qualifications - Experience supporting federal government environments. - Experience supporting IT governance, enterprise architecture, or modernization programs. - Familiarity with enterprise IT infrastructure, cybersecurity, or cloud environments. - Experience developing technical reports, governance documentation, or executive briefings. - Experience collaborating across multidisciplinary technical teams. Requirements Due to the nature of the work we support, all candidates in consideration for this role must be willing to undergo the government issued background investigation process. We highly encourage all Veterans and those with disabilities to apply. Benefits - Competitive pay. - Comprehensive health coverage. - Flexible PTO. - Federal holidays off. - Tuition reimbursement. - Professional development support. - Wellness stipends. - A culture that values and rewards hard work, dedication, and adaptability. Company Description Ardent hires people who want more than a job — they want to serve a mission that matters. Our teams support the federal government’s most critical national security and defense priorities, helping protect the nation, strengthen resilience, and advance the technologies and capabilities that keep America secure.

United States