Cyber Sec ArchEngr II

Are you passionate about helping to drive global Cybersecurity innovation and change Do you thrive in environments that encourage critical thinking creativity and challenging the status quo

Honeywell Cyber Fusion Center is looking for a Cyber Security Architect/Engr to join the cyber security incident response this role you will be responsible for detecting analyzing and responding to cybersecurity incidents. You will support the remediation of complex security incidents that span multiple service towers and technologies. The role requires close global collaboration with crossfunctional teams to effectively defend Honeywell against cyber threats and attacks.

This position allows deep insight into various aspects of cyber security and will require attention to detail a sense of urgency and strong communication skills.

• Participate on a team of highly skilled cybersecurity incident responders.
• Build and maintain processes and procedures.
• Assess the scope severity and potential impact of Cyber incidents
• Assist with driving complex cybersecurity incidents to successful conclusion.
• Understand root causes of cybersecurity incidents.
• Perform initial analysis identification and remediation of network intrusions application attacks and computer system compromises.
• Constantly optimize work procedures and automate recurring tasks. Develop and update technical documentation and formulate work instructions to address repeating issues.
• Collaborate with global team members based in the Europe India and US.
• Participate in global on-call rotation.
• Serve as part of a 24/7 shift support modem (no night shifts).

• Bachelors degree in Cybersecurity Computer Science or equivalent experience.
• 2 years of experience in Information Security or Information Technology fields.
• 2 years of experience in a cybersecurity role.
• Experience with SIEM and EDR solutions.
• Experience with dynamic and static malware analysis
• Good technical knowledge of Windows/Linux operating systems various types of applications and networking technologies.
• Analytical skills in threat vulnerability and intrusion detection analysis.
• Keen understanding of threat vectors as well as exfiltration techniques.
• Attention to detail.
• Ability to develop and follow complex work instructions and documentation.
• Experience in working in a global process-driven organization.
• Willingness to learn.

We value

• Experience with SOAR Solutions like XSOAR/Demisto.
• Knowledge in cloud security (Azure AWS MS Office 365).
• Knowledge of Linux operating system.
• One or more widely recognized certifications from renowned institutions such as GIAC/SANS ISC/CISSP or Microsoft.
• Detailed knowledge of Endpoint Detection and Response tools (e.g. Sentinel or MS Defender ATP).
• Knowledge of scripting in Python or PowerShell.
• Understanding of ITIL process such as Incidents Change & Problem management.
• Experience in working in a global process-driven organization.