The Role
Develop and support security automation solutions across Cortex XSOAR and Splunk. Build integrations, automated workflows, playbooks, and security data-source pipelines in collaboration with Incident Response, Threat Intelligence, Insider Risk, and SOC teams. Maintain scalable internal and third-party tools, improve SOC efficiency, and support security monitoring and incident investigation. The role requires strong Python software development, Linux, web technologies, Git, SQL, and cybersecurity operations knowledge.
Summary Generated by Built In
Qualifications
This role is responsible for developing, enhancing, and supporting security automation solutions across Cortex XSOAR and Splunk. The successful candidate will collaborate with Incident Response, Threat Intelligence, Insider Risk, and SOC stakeholders to build integrations and automated workflows, onboard and maintain security data sources, and improve the reliability and efficiency of security operations. The position requires strong software development experience and the ability to deliver scalable solutions in a fast-paced, cross-functional environment.
Key Responsibilities
- Collaborate closely with the Incident Response, Threat Intelligence, and Insider Risk teams to design, develop, and enhance capabilities on the Cortex XSOAR platform.
- Develop and implement automation solutions that reduce manual effort and improve the efficiency of Security Operations Center (SOC) processes.
- Operate effectively in a fast-paced environment, managing and prioritizing diverse requests from multiple teams.
- Develop, maintain, and enhance internally built and third-party tools, ensuring their reliability, scalability, and alignment with operational requirements.
Required Qualifications
- A minimum of seven years of software development experience using Python and web frameworks such as Django and Flask.
- Working knowledge of front-end technologies, including HTML, CSS, JavaScript, and jQuery.
- Hands-on experience working in Linux environments, including Red Hat Enterprise Linux (RHEL) and Debian-based distributions.
- Experience managing source code and collaborating through Git-based repositories.
- A sound understanding of SQL fundamentals and database management systems (DBMS).
- A demonstrated eagerness to learn new technologies and adapt quickly to changing requirements.
- Basic knowledge of Security Operations Center (SOC) operations, including security monitoring, alert triage, incident investigation, and escalation processes.
Added Advantage
- Experience designing and developing features, integrations, or automated playbooks within Security Orchestration, Automation, and Response (SOAR) platforms.
- Hands-on experience onboarding, configuring, and validating data sources in Splunk.
- Proficiency in developing and optimizing complex Splunk Search Processing Language (SPL) queries for security monitoring, investigation, and reporting.
- Experience working with cybersecurity tools that support incident response and threat intelligence operations.
- Experience integrating security platforms with IT service management tools and ITIL-aligned workflows, particularly ServiceNow.
Skills Required
- At least seven years of software development experience using Python and web frameworks such as Django and Flask
- Working knowledge of HTML, CSS, JavaScript, and jQuery
- Hands-on experience with Linux environments, including Red Hat Enterprise Linux and Debian-based distributions
- Experience managing source code and collaborating through Git-based repositories
- Understanding of SQL fundamentals and database management systems
- Eagerness to learn new technologies and adapt to changing requirements
- Basic knowledge of SOC operations, including security monitoring, alert triage, incident investigation, and escalation
- Experience designing and developing features, integrations, or automated playbooks in SOAR platforms
- Experience onboarding, configuring, and validating data sources in Splunk
- Proficiency developing and optimizing complex Splunk SPL queries
- Experience with cybersecurity tools supporting incident response and threat intelligence operations
- Experience integrating security platforms with IT service management tools and ITIL-aligned workflows, particularly ServiceNow
Honeywell Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Honeywell and has not been reviewed or approved by Honeywell.
-
Retirement Support — Retirement benefits are anchored by a strong 401(k) match with clear vesting and annual funding mechanics. Plan administration and education resources further reinforce long‑term savings support.
-
Leave & Time Off Breadth — Time away provisions include company holidays, flexible vacation for many exempt roles, and paid sick time. These policies contribute meaningful breadth beyond base pay.
-
Parental & Family Support — Paid parental leave is available to all parents with flexible usage options, and certain family‑building supports are included. Birth mothers can coordinate leave with short‑term disability for extended coverage.
Honeywell Insights
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Honeywell is a Fortune 500 company that invents and manufactures technologies to address tough challenges linked to global macrotrends such as safety, security, and energy. With approximately 110,000 employees worldwide, including more than 19,000 engineers and scientists, we have an unrelenting focus on quality, delivery, value, and technology in everything we make and do.
