Threat Detection Principal Engineer

Fannie Mae is foundational to housing finance, and they are seeking a Threat Detection Principal Engineer to enhance their cybersecurity measures. In this role, you will monitor and evaluate threats, create cyber indicators, and work with Incident Response to investigate potential cybersecurity incidents.

Responsibilities:

• Stay current on Fannie Mae's information security activities and systems
• Create cyber indicators to maintain awareness of systems and alert when abnormal behavior is detected
• Improve existing indicators to detect more advanced threats
• Monitor cyber threats in real-time
• Work with Incident Response to investigate threats and attacks

Requirements:

• 8 years of experience
• Bachelor's Level Degree (Required)
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field, or equivalent combination of education and relevant work experience. Advanced degree is a plus
• Demonstrated experience in threat detection and response, security operations, incident handling, and detection engineering within complex enterprise environments
• Experience designing, maturing, or leading capabilities related to SIEM, EDR, UEBA, insider threat detection, security analytics, and response automation is strongly preferred
• Experience applying AI/ML or advanced analytics to cybersecurity use cases, particularly in support of threat detection, alert triage, investigation, response, or workflow automation
• Practical experience evaluating the effectiveness, limitations, and operational risks of AI-assisted security capabilities is highly desirable
• Proven ability to lead cross-functional efforts involving cybersecurity, engineering, data, and operations teams to implement scalable, measurable, and business-aligned security solutions
• Experience establishing governance, validation, and performance measures for automated or AI-assisted security controls is also preferred
• Background in modern threat landscapes, including external threats, insider risk, adversary behaviors, and emerging AI-enabled attack techniques, with the ability to translate those risks into effective detection and response strategies