Cyber Security Architect/Engineer I (m/f/d)

Posted 3 Days Ago
Be an Early Applicant
București, ROU
In-Office
Entry level
Aerospace
The Role
Monitors and triages security events in an industrial SOC using SIEM, firewalls, IDS/IPS, and other infrastructure logs. Performs initial analysis, escalates incidents to Level 2, tunes detection rules and alerts, documents remediation recommendations, supports control deployment improvements, maintains knowledge-base entries, and tracks emerging threats, vulnerabilities, legislation, and security advisories.
Summary Generated by Built In

We have an opportunity for a Cyber Security Architect/Engineer I to join us at Honeywell Technologies, in Bucharest, Romania.

This position will be a part of the Industrial Cyber-Security team and will participate in delivering and developing cyber security services for a wide range of industrial global customers. The position will have a direct reporting relationship to the Global Security Operation Center Manager and Incident Response Lead and work as part of a global managed services team. The position requires good cyber security knowledge, excellent analytical skills and proficient handling of specific tools such as SIEMs and Orchestration and Automation platforms. A successful candidate would be able to provide real time eyes on glass monitoring and ticket triage within an environment and provide additional intelligence and analysis before event escalation to Level 2 Cyber Security Operations team as needed.

Honeywell Technologies

We have been innovating for more than 100 years and now we’re creating what’s next. Our programs serve a global community and our hometowns too. We provide resources and financial support to causes around the world and encourage employee volunteerism. We are committed to the highest standard in everything we do!

Responsibilities

Key responsibilities

  • Provide real time eyes on glass monitoring and ticket triage on SIEM trouble tickets / email notifications and in-person escalations, logs from infrastructure components, applications or network devices such as firewalls, IDS/IPS;
  • Add additional intelligence and analysis before event escalation to Level 2 Cyber Security Operations team
  • Suggests improvements to control deployment process and installation procedures 
  • Documents remediation recommendations for business owners to improve the control environment in which a security incident occurs. 
  • Provide recommendations and direction on the tuning of signatures, rules, alerts, parsers, and custom scripts within the monitoring solutions;
  • Understand defense in depth strategies and apply those to Client’s environment;
  • Acts as L1 Escalation layer in the SOC.
  • Creates knowledge base entries;
  • Keep abreast of latest security and privacy legislation, emerging threats, regulations, advisories, alerts, and vulnerabilities pertaining to HPS ICS SOC and its customers;
  • Remains knowledgeable of our current solution portfolio and the technical specificities of our offerings.
Qualifications

Key skills and qualifications

  • Provide real time eyes on glass monitoring and ticket triage on SIEM trouble tickets / email notifications and in-person escalations, logs from infrastructure components, applications or network devices such as firewalls, IDS/IPS;
  • Add additional intelligence and analysis before event escalation to Level 2 Cyber Security Operations team
  • Suggests improvements to control deployment process and installation procedures 
  • Documents remediation recommendations for business owners to improve the control environment in which a security incident occurs. 
  • Provide recommendations and direction on the tuning of signatures, rules, alerts, parsers, and custom scripts within the monitoring solutions;
  • Understand defense in depth strategies and apply those to Client’s environment;
  • Acts as L1 Escalation layer in the SOC.
  • Creates knowledge base entries;
  • Keep abreast of latest security and privacy legislation, emerging threats, regulations, advisories, alerts, and vulnerabilities pertaining to HPS ICS SOC and its customers;
  • Remains knowledgeable of our current solution portfolio and the technical specificities of our offerings.
Additional Qualifications
  • Ability to write documentation and summaries;
  • Experience working in a client facing Cyber SOC environment;
  • Result oriented;
  • Proactive;
  • Critical reasoning;
  • Self-learner, self-motivated;
  • Detail oriented.
  • Operating systems;
  • Virtualization;
  • Networking basics;
  • Firewalls / Next Generation Firewalls;
  • IPS/IDS Devices;
  • SIEM;
  • Encryption;
  • Patching – products, strategies;
  • Antivirus – centralized management of solutions;
  • Monitoring – availability, security controls/policies, vulnerabilities
  • Scripting;

We offer:

  • ​​Competitive Salary 
  • Enjoy 25 vacation days per year, plus extra days off for life's special events
  • We provide meal vouchers
  • Flexible benefits basket with monthly budget allocated (top up medical insurance, life insurance, pension, vacation/ cultural/ fuel vouchers)
  • Medical Insurance Plan paid by the company
  • Recognition & referral bonus programs
  • Comprehensive induction, ongoing training and development to set you up for success
  • In-house and external learning platforms (Udemy) to continue to expand your skills
  • Work experience opportunities to help you grow your career with us
  • Global employee networks to help you connect and grow
  • Employee Assistance Program - Free and confidential service to help with any difficulties regarding work, life and personal or family matters
  • In case of unfortunate events, we support you by offering you free days and financial support (handled on a case by case basis) or Family financial aids
  • Access Integrity line - Any workplace issues or violations that need to be raised in good faith, can be communicated in a safe, private and confidential environment
  • Your family is growing while working at Honeywell? We congratulate you by offering special bonuses
  • Frequent Employee Engagement activities fostering an inclusive and diverse work environment

Equal Opportunity Statement

We are an equal opportunity employer and value diversity at our company. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.


Join us now and be part of a global team of thinkers, innovators, dreamers, and doers who make the things that make the future!

#TheFutureIsWhatWeMakeIt

About UsHoneywell Technologies is a global, pure-play automation company with a legacy of innovating to help solve the world’s most mission-critical challenges, enhancing the quality of life for people and communities around the world. We serve the building, industrial and process sectors with a broad portfolio of services, solutions and products, underpinned by our Honeywell Technologies Accelerator operating system and Honeywell Technologies Forge intelligence layer. By combining the deep domain expertise of our more than 50,000 employees with decades of data from our global installed base, we are uniquely positioned to lead the industrial sector’s transition from automation to autonomy.

Skills Required

  • Cybersecurity knowledge
  • Excellent analytical skills
  • Proficiency with SIEM and security orchestration and automation platforms
  • Experience with real-time security monitoring and ticket triage
  • Ability to analyze and escalate security events
  • Experience tuning signatures, rules, alerts, parsers, and custom scripts
  • Understanding of defense-in-depth strategies
  • Ability to write documentation and summaries
  • Experience working in a client-facing cybersecurity SOC environment
  • Knowledge of operating systems and virtualization
  • Knowledge of networking basics
  • Knowledge of firewalls and next-generation firewalls
  • Knowledge of IPS/IDS devices
  • Knowledge of encryption
  • Knowledge of patching products and strategies
  • Knowledge of centrally managed antivirus solutions
  • Knowledge of monitoring for availability, security controls, policies, and vulnerabilities
  • Scripting skills
  • Critical reasoning, proactive approach, self-motivation, and attention to detail
Am I A Good Fit?
beta
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.

The Company
Mississauga, Ontario
10,000 Employees
Year Founded: 1914

Similar Jobs

Honeywell Logo Honeywell

Architect

Aerospace • Security • Energy • Industrial
In-Office
2 Locations
110269 Employees

Pfizer Logo Pfizer

Data Scientist

Artificial Intelligence • Healthtech • Machine Learning • Natural Language Processing • Biotech • Pharmaceutical
Remote or Hybrid
28 Locations
121990 Employees

Hewlett Packard Enterprise Logo Hewlett Packard Enterprise

Marketing Nurture Strategist

Artificial Intelligence • Cloud • Information Technology • Consulting
In-Office
Bucharest, București, ROU
85422 Employees

Hewlett Packard Enterprise Logo Hewlett Packard Enterprise

EMEA Services Q2C Complex Deal Customer Experience Lead

Artificial Intelligence • Cloud • Information Technology • Consulting
In-Office
Bucharest, București, ROU
85422 Employees

Similar Companies Hiring

Rangeview Thumbnail
Aerospace • Robotics • Energy • Defense • Manufacturing • Weapons Systems
El Segundo, California
38 Employees
Outpost Space Thumbnail
Aerospace • Defense
Los Angeles, California
38 Employees
Revel Thumbnail
Aerospace • Hardware • Robotics • Software
Marina Del Rey, California
70 Employees

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account