Advanced Cyber Sec Archt/Engr

Honeywell Technologies; India; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

Honeywell Technologies is seeking a senior developer to design, develop, and support security automation across Cortex XSOAR and Splunk. You will collaborate with Incident Response, Threat Intelligence, Insider Risk, and SOC stakeholders to build integrations and automated workflows, onboard data sources, and improve operational reliability in a fast-paced environment.

The role emphasizes strong Python development, experience with Django/Flask, and hands-on Linux, Git, and SQL skills, with added

Qualifications

• A minimum of seven years of software development experience using Python and web frameworks Django and Flask.
• Working knowledge of HTML, CSS, JavaScript, and jQuery.
• Hands-on Linux experience (RHEL and Debian-based).
• Experience with Git-based source control.
• Strong SQL fundamentals and DBMS knowledge.
• Eagerness to learn new technologies and adapt quickly.
• Basic SOC operations knowledge including monitoring, triage, investigation, and escalation.

Responsibilities

• Collaborate with Incident Response, Threat Intelligence, Insider Risk, and SOC teams to design and enhance Cortex XSOAR and Splunk capabilities.
• Develop automation solutions to reduce manual effort and improve SOC efficiency.
• Manage diverse requests from multiple teams in a fast-paced environment.
• Develop and maintain internal and third-party tools ensuring reliability and scalability.

Skills

Python

Front-end technologies

HTML/CSS/JavaScript/jQuery

Linux (RHEL/Debian)

Git

SQL fundamentals

Willingness to learn

SOC basics

Tools

Django

Flask

Splunk

SPL

ServiceNow

SOAR platforms

Job description

Qualifications

This role is responsible for developing, enhancing, and supporting security automation solutions across Cortex XSOAR and Splunk. The successful candidate will collaborate with Incident Response, Threat Intelligence, Insider Risk, and SOC stakeholders to build integrations and automated workflows, onboard and maintain security data sources, and improve the reliability and efficiency of security operations. The position requires strong software development experience and the ability to deliver scalable solutions in a fast-paced, cross-functional environment.

Qualifications

This role is responsible for developing, enhancing, and supporting security automation solutions across Cortex XSOAR and Splunk. The successful candidate will collaborate with Incident Response, Threat Intelligence, Insider Risk, and SOC stakeholders to build integrations and automated workflows, onboard and maintain security data sources, and improve the reliability and efficiency of security operations. The position requires strong software development experience and the ability to deliver scalable solutions in a fast-paced, cross-functional environment.

Key Responsibilities

• Collaborate closely with the Incident Response, Threat Intelligence, and Insider Risk teams to design, develop, and enhance capabilities on the Cortex XSOAR platform.
• Develop and implement automation solutions that reduce manual effort and improve the efficiency of Security Operations Center (SOC) processes.
• Operate effectively in a fast-paced environment, managing and prioritizing diverse requests from multiple teams.
• Develop, maintain, and enhance internally built and third-party tools, ensuring their reliability, scalability, and alignment with operational requirements.

Required Qualifications

• A minimum of seven years of software development experience using Python and web frameworks such as Django and Flask.
• Working knowledge of front-end technologies, including HTML, CSS, JavaScript, and jQuery.
• Hands‑on experience working in Linux environments, including Red Hat Enterprise Linux (RHEL) and Debian‑based distributions.
• Experience managing source code and collaborating through Git‑based repositories.
• A sound understanding of SQL fundamentals and database management systems (DBMS).
• A demonstrated eagerness to learn new technologies and adapt quickly to changing requirements.
• Basic knowledge of Security Operations Center (SOC) operations, including security monitoring, alert triage, incident investigation, and escalation processes.

Added Advantage

• Experience designing and developing features, integrations, or automated playbooks within Security Orchestration, Automation, and Response (SOAR) platforms.
• Hands‑on experience onboarding, configuring, and validating data sources in Splunk.
• Proficiency in developing and optimizing complex Splunk Search Processing Language (SPL) queries for security monitoring, investigation, and reporting.
• Experience working with cybersecurity tools that support incident response and threat intelligence operations.
• Experience integrating security platforms with IT service management tools and ITIL‑aligned workflows, particularly ServiceNow.

About Us

Honeywell Technologies is a global, pure‑play automation company with a legacy of innovating to help solve the world's most mission‑critical challenges, enhancing the quality of life for people and communities around the world. We serve the building, industrial and process sectors with a broad portfolio of services, solutions and products, underpinned by our Honeywell Technologies Accelerator operating system and Honeywell Technologies Forge intelligence layer. By combining the deep domain expertise of our more than 50,000 employees with decades of data from our global installed base, we are uniquely positioned to lead the industrial sector’s transition from automation to autonomy.