At CF Industries, our mission is to provide clean energy to feed and fuel the world sustainably. Our employees are focused on safe and reliable operations, environmental stewardship, and disciplined capital and corporate management. By joining CF, you will be part of a team that brings their varied experiences, wide-ranging knowledge and diverse talents together to deliver important work and you’ll be able to pursue complex, exciting opportunities that help you continue to grow and achieve your potential in different areas.  You’ll take pride in working for a company that lives its values and where you can be yourself at work, as part of an authentic team that encourages you to share your views and opinions.  Our eight manufacturing complexes in the United States, Canada, and the United Kingdom, an unparalleled storage, transportation and distribution network in North America, and logistics capabilities enabling a global reach underpin our strategy to leverage our unique capabilities to accelerate the world’s transition to clean energy.

Function:

Information Technology

Job Summary:

The Cyber Security Architect is responsible for designing, building, testing, and implementing security systems within CF’s network.  A Security Architect is expected to have a thorough understanding of complex IT systems and stay up to date with the latest security standards, systems, and authentication protocols, as well as best practice security products.  Guide, mentor and develop others, to be the face of the team.

Job Description:

Responsibilities

• Identify and communicate current and emerging security threats.

• Design logging, monitoring, and threat detection capabilities for both on-premises and cloud systems.

• Drive integration of security tools across the environment using common methods such as REST APIs, webhooks, event callbacks, and connection agents.

• Evaluate, test, recommend, develop, coordinate, and monitor information systems (IS) and cyber security policies, procedures, and systems, including access management for hardware and software.

• Ensure that IS and cyber security architecture/designs, plans, controls, processes, standards, policies, and procedures are aligned with IS standards and overall IS and cybersecurity.

• Identify security risks and exposures, determine the causes of security violations, and suggest procedures to halt future incidents and improve security.

• Implement network segmentation and monitoring in cloud environments, including network security groups, virtual networks and peerings, user defined routes, and private endpoints.

• Design security architecture elements to mitigate threats as they emerge.

• Create and recommend solutions that balance business requirements with cybersecurity requirements.

• Manage the Security Information and Event Management (SIEM) system, including analytic rule tuning, threat feed integrations, identity enrichment, and MITRE ATT&CK mappings.

• Actively participate in blue team / red team engagements, including incident response tabletop scenarios.

• Utilize common scripting languages (e.g. Python, PowerShell, bash) for automation tasks.

• Respond immediately to security-related incidents and provide thorough remedial solutions and analysis.

• Translate technical cybersecurity risks into business language for upper management.

• Lead and mentor security analysts on security best practices.

Contribution:

• Breadth of Scope: Scope is typically within the Information Technology or work team.  May work across or interact /coordinate with multiple functions.

• Communications and Interpersonal Skills: Demonstrated ability to communicate com