Are you passionate about helping to drive global Cybersecurity innovation and change? Do you thrive in environments that encourage critical thinking, creativity, and challenging the status quo?
Honeywell Cyber Fusion Center is looking for a Advanced cyber security architect/Eng to work as part of our L3 incident response team. This role is responsible for leading complex incident investigations and drives strategic security improvements. This person will help coordinate globally with multiple teams to defend Honeywell from cyber-attacks.
This position allows deep insight into various aspects of cyber security and will require attention to detail, a sense of urgency, and strong communication skills.
Duties and Responsibilities
- Participate on a team of highly skilled cybersecurity incident responders.
- Build and maintain processes and procedures.
- Assist with driving complex cybersecurity incidents to successful conclusion.
- Hands-on experience analyzing security incidents to uncover root causes, attack vectors, and threat actor behavior.
- Perform initial analysis, identification, and remediation of network intrusions, application attacks, and computer system compromises.
- Assess the scope, severity, and potential impact of cybersecurity incidents.
- Help mentor junior analysts in our L1 and L2 teams to help build a pipeline of talent that flows into L3.
- Constantly optimize work procedures and automate recurring tasks. Develop and update technical documentation and formulate work instructions to address repeating issues.
- Collaborate with global team members based in the Europe, India and US.
- Participate in global on-call rotation.
Key Requirements
- Bachelor’s degree in Cybersecurity, Computer Science, or equivalent experience.
- 5+ years of experience in Information Security or Information Technology fields.
- 3+ years of experience in cybersecurity operations, with strong incident response background.
- Experience with SIEM, Splunk and EDR solutions.
- Good technical knowledge of Windows/Linux operating systems, various types of applications, and networking technologies.
- Analytical skills in threat, vulnerability, and intrusion detection analysis.
- Keen understanding of threat vectors as well as exfiltration techniques.
- Advanced incident handling and crisis management
- Attention to detail.
- Ability to develop and follow complex work instructions and documentation.
- Strong analytical skills with the ability to manage incidents under pressure.
- Willingness to learn.
We value
- Experience with SOAR Solutions like XSOAR/Demisto.
- Knowledge in cloud security (Azure, AWS, MS Office 365).
- Knowledge of Linux operating system.
- One or more widely recognized certifications from renowned institutions such as GIAC/SANS, ISC/CISSP or Microsoft.
- Detailed knowledge of Endpoint Detection and Response tools (e.g., Sentinel or MS Defender ATP).
- Knowledge of scripting in Python or PowerShell.
- Understanding of ITIL process, such as Incidents, Change & Problem management.
- Experience in working in a global, process-driven organization.
Skills Required
- Bachelor's degree in Cybersecurity, Computer Science, or equivalent experience.
- 5+ years of experience in Information Security or Information Technology fields.
- 3+ years of experience in cybersecurity operations with strong incident response background.
- Experience with SIEM, Splunk, and EDR solutions.
- Good technical knowledge of Windows and Linux operating systems, applications, and networking technologies.
- Analytical skills in threat, vulnerability, and intrusion detection analysis.
- Keen understanding of threat vectors and exfiltration techniques.
- Advanced incident handling and crisis management skills.
- Ability to develop and follow complex work instructions and documentation.
- Strong analytical skills with the ability to manage incidents under pressure.
- Willingness to learn.
- Participate in global on-call rotation and collaborate with international teams.
- Experience with SOAR solutions such as XSOAR/Demisto.
- Knowledge of cloud security (Azure, AWS, Microsoft Office 365).
- Familiarity with Endpoint Detection and Response tools (e.g., Sentinel, Microsoft Defender ATP).
- Knowledge of scripting in Python or PowerShell.
- One or more certifications (e.g., GIAC/SANS, ISC/CISSP, Microsoft).
- Understanding of ITIL processes (Incident, Change, Problem management).
- Experience working in a global, process-driven organization.
Honeywell Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Honeywell and has not been reviewed or approved by Honeywell.
-
Retirement Support — Retirement plans feature a notably strong company 401(k) match with vesting after three years, enhancing long-term savings security. Additional tax-advantaged accounts and company contributions for eligible earners further strengthen financial preparedness.
-
Leave & Time Off Breadth — Time off policies include flexible or unlimited vacation for many salaried roles and a broad observed-holiday schedule, providing manager-approved flexibility. This structure supports rest and work-life balance across varied needs.
-
Parental & Family Support — Parental leave offers paid time for birth, adoption, or foster care that can be taken consecutively or intermittently. The design enables practical flexibility in how family leave is used.
Honeywell Insights
What We Do
Honeywell is a Fortune 500 company that invents and manufactures technologies to address tough challenges linked to global macrotrends such as safety, security, and energy. With approximately 110,000 employees worldwide, including more than 19,000 engineers and scientists, we have an unrelenting focus on quality, delivery, value, and technology in everything we make and do.
