Enterprise Security Architect III - Attack Surface Management

Where You Will Work   

Our global headquarters is in Phoenix, Arizona. Several hundred employees support global operations in finance, human resources, information technology, planning and more from the main office, satellite offices or online. As a Hybrid employee, you will collaborate primarily virtually anywhere in the U.S. except California, Connecticut, Illinois, Kansas, Kentucky, Massachusetts, Michigan, New Hampshire, New York, North Carolina, Oklahoma and South Carolina. Additional states may be excluded based on business factors. Occasionally, you may be required to attend in-person meetings at our Collaboration Hub at the Cotton Center in Phoenix and/or one of our site locations. The Collaboration Hub provides an open, flexible workspace for individuals and teams to come together for various business needs. Amenities at the Hub include a working café, phone booths and meeting rooms with technology tools for virtual and in-person collaboration.  In person attendance may vary based on the position and department requirements.

 

Phoenix is the capital of the Grand Canyon State and enjoys mostly bright skies throughout the year. It is the perfect place if you enjoy the outdoors, love sports, concerts and other big city amenities or technology. There are great neighborhoods around Phoenix, with easy access to a major city, nature, the arts and many more amenities. 

Description

Design, conduct Proof-of-Concepts (POCs), and collaborate with various MIS teams responsible for the overall security posture of the infrastructure and applications used within the organization.  Work with partners to design and execute penetration testing, red/purple team exercises, as well as participate in tabletop exercises for incident response and recovery topics. Analyze technologies and recommend upgrades/changes based on assessments of the organization's current and future needs.

 

• Coordinate with management and IT architects to design system solutions and create implementation and support models for security posture of various cloud technologies and on-premise solutions.
• Create both short and long-term security roadmaps based on an understanding of the organizational strategic requirements, technology context and business needs.
• Define and review reports to ensure program objectives are successfully delivered. Proactively intervene to correct problems when they are encountered. Use metrics to improve processes.
• Work effectively with other IT teams and outsourcing provider(s) to ensure technology security solutions are effectively managed and performed.
• Provide a thorough analysis of service results and respond to any escalated service delivery issues.
• Assess organization’s current and future technology needs. Set direction and lead improvements of techniques, methodologies and deliverables.
• Perform other duties as requested.

Qualifications

Minimum Qualifications:

• Associates Degree and ten (10) years of experience in security systems technologies and ISACA, SANS, ISC(2), or CEH Certification or related security certification; OR
• Bachelor’s Degree in Information Systems or related field and eight (8) years of experience in security systems technologies; OR
• Bachelor’s Degree in Information Systems or related field and six (6) years of experience in security systems technologies and ISACA, SANS, ISC(2), or CEH Certification or related security certification; OR
• Master’s Degree in Information Systems or related field and six (6) years of experience in security systems technologies; OR
• Master’s Degree in Information Systems or related field and five (5) years of experience insecurity systems technologies and ISACA, SANS, ISC(2), or CEH Certification or related security certification

 

Preferred Qualifications:

• Security certifications, such as CISSP, CISM, GIAC, etc.
• Experience with Threat and Vulnerability Management (TVM) solutions such as Tenable or Qualys (experience with Ivanti Neurons/Risksense is a plus)
• Experience with Cloud Security Posture Management (CSPM) solutions
• Experience with Attack Surface Management (ASM) solutions
• Experienced working with managed service providers
• Active in security organizations, such as ISC2, ISACA, SANS, etc.

 

Criteria/Conditions:

• Personal protective equipment is required when performing work in a mine, outdoor, manufacturing or plant environment, including hard hat, hearing protection, safety glasses, safety footwear, and as needed, respirator, rubber steel-toe boots, protective clothing, gloves and any other protective equipment as required.
• Freeport-McMoRan promotes a drug/alcohol-free work environment through the use of mandatory pre-employment drug testing and on-going random