Principle Incident Response Analyst

Honeywell Aerospace; Phoenix (AZ); Remote; USD 150,000 - 210,000; Full time

Benefits offered by this job

Medical insurance

Dental & vision

401(k) match

Educational assistance

Paid holidays

PTO & leave

Job summary

Honeywell Aerospace is seeking a Principle Incident Response Analyst to lead DFIR investigations, triage threats, and drive incident response initiatives. The role includes mentoring junior staff, developing corrective actions, and coordinating with a global security team from the Phoenix area or remote.

The candidate will report to the Sr. Director of Cyber Security and engage with executive leadership, focusing on security measures across multiple industries and environments.

Qualifications

• Minimum 3+ years in security with a DFIR focus.
• At least 5 years in Incident Commanding / Response.
• Experience in Network and Host Forensics, Windows/Linux/macOS, Log Analysis, Malware Analysis.
• Experience presenting to Executive Leadership and mentoring.
• Bachelor’s Degree required.

Responsibilities

• Mentor junior cyber security analysts.
• Build and maintain processes and procedures.
• Drive complex cybersecurity incidents to successful conclusion.
• Collaborate with global team members.
• Lead large-scale technical projects.
• Develop Root Cause and Corrective Action Reports.
• Serve as part of a Global On-Call Rotation.
• Threat Hunting.

Skills

DFIR

Incident Command

Triage

Mentoring

Threat Hunting

Education

Bachelor's Degree

Tools

SIEM

SOAR

EDR

Azure

AWS

Docker

Kubernetes

Job description

As a Principle Incident Response Analyst at Honeywell Aerospace, you will be instrumental in conducting detailed analysis and providing insights on cybersecurity data. Your role will focus on Digital Forensics and Incident Response (DFIR) as an Incident Commander and lead incidents, where you'll engage in triage activities to identify potential threats and vulnerabilities within our systems. You will ensure the implementation of effective security measures to protect critical assets and information across various industries.

Cybersecurity Incident Response Team (CIRT)

Are you passionate about leading global Cybersecurity innovation and change? Do you thrive in environments that encourage critical thinking, creativity, and challenging the status quo?

We are looking for a Technical Analyst experienced in DFIR and triage processes, capable of conducting thorough incident investigations, working closely with senior leadership, supporting the development of junior team members, and contributing to the organization’s cybersecurity strategies and initiatives.

You will report directly to our Sr. Director of Cyber Security, and work out of our Phoenix, AZ location or REMOTE.

KEY RESPONSIBILITIES

• Mentor junior cyber security analysts
• Build and maintain processes and procedures.
• Drive complex cybersecurity incidents to successful conclusion.
• Collaborate with global team members.
• Lead large-scale technical projects.
• Develop Root Cause and Corrective Action Reports.
• Serve as part of a Global On-Call Rotation.
• Threat Hunting

US PERSON REQUIREMENT

Due to compliance with U.S. export control laws and regulations, candidate must be a U.S. Person, which is defined as, a U.S. citizen, a U.S. permanent resident, or have protected status in the U.S. under asylum or refugee status or have the ability to obtain an export authorization.

YOU MUST HAVE

Technical: Minimum of 3 plus years

• At least 5 years: Incident Commanding / Response
• At least 5 plus years in any of the following:
  • Network and Host Forensics
  • Operating Systems (Windows, Linux, macOS)
  • Automation (e.g., Python, Shell, PowerShell)
  • Log Analysis
  • Malware Analysis
  • Presentations to Executive Leadership
  • Technical Training / Mentoring
  • Bachelor’s Degree
• Professional (2 Plus Years):
  • Presentations to Executive Leadership
  • Technical Training/Mentoring
• Education:
  • Bachelor's Degree

WE VALUE

• Experience with SIEM, SOAR, and EDR Solutions
• Cloud & Container Security (Azure, AWS, O365, Docker, Kubernetes)
• Reverse Engineering Malware
• Strong Critical Thinker & Problem Solver

The annual base salary range for this position in California and New York (excluding most major metropolitan areas), Colorado, Connecticut, and Hawaii is $164,000- 206,000. For Washington and most major metropolitan areas in New York & California, the annual base salary range is $189,000- 236,000. Please note that this salary information serves as a general guideline. Honeywell Aerospace considers various factors when extending an offer, including but not limited to the scope and responsibilities of the position, the candidate's work experience, education and training, key skills, as well as market and business considerations.

BENEFITS

• Employer-subsidized medical, dental, vision and life insurance
• Short-term and long-term disability coverage
• 401(k) match, flexible spending accounts and health savings accounts
• Employee assistance program and educational assistance
• Parental leave and 12 paid holidays
• Paid time off for vacation, personal and sick time

Explore your benefits: https://honeywellaerospacebenefits.com/

The application period for the job is estimated to be 40 days from the job posting date; however, this may be shortened or extended depending on business needs and the availability of qualified candidates.

Join a company that's reintroducing itself to the aviation community we've helped advance for more than a century. At Honeywell Aerospace (NASDAQ: HONA), we're launching as an independent, publicly traded aerospace and defense company built on a legacy of operational excellence and mission-focused execution.

Our new brand identity pairs that heritage with real momentum, as we build technology that helps pilots navigate with confidence, aircraft operate more efficiently, and operators stay ahead of change. With our systems on board 90% of the world's aircraft, your work here has reach that's rare to find anywhere else.

Focusing on our customers, investing in innovation, and building a culture of accountability and performance is how we're shaping what comes next.

Every horizon. Every mission. Every day.

Honeywell Aerospace products and services are found on aircraft across commercial aviation, defense and space. We operate through three business areas:

• Electronic Solutions develops the avionics, navigation systems, sensors and electromagnetic defense technology on board 90% of the world's aircraft
• Engines & Power Systems provides the propulsion, auxiliary power and electrical systems that keep those aircraft flying
• Control Systems supplies the thermal and motion control systems that support takeoff, landing and the safety of everyone on board

With approximately 58,000 employees worldwide and net sales of $17.4B in 2025, we are also advancing systems for autonomous and supersonic platforms — bringing the same focus on safety and efficiency to the next era of flight. Explore our businesses: https://www.honeywellaerospace.com

#LI-remote