Senior DFIR Incident Commander (Remote)

Honeywell Aerospace US LLC; Phoenix (AZ); Remote; USD 150,000 - 210,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

Life insurance

401(k) match

Paid holidays

Paid time off

Job summary

Honeywell Aerospace US LLC seeks a Principle Incident Response Analyst to lead DFIR investigations and serve as Incident Commander, guiding triage and response across global teams. The role emphasizes mentoring, developing incident playbooks, and reporting Root Cause analyses. The position can be based in Phoenix, AZ or work remotely, reporting to the Sr.

Director of Cyber Security. Candidates should have extensive DFIR experience, strong executive communication, and a track record of driving

Qualifications

• Minimum of 3+ years in cybersecurity with DFIR experience.
• 5+ years in Incident Commanding/Response.
• Experience with Network and Host Forensics, Windows/Linux/macOS, and Malware Analysis.
• Experience presenting to Executive Leadership; mentoring and training.
• Bachelor’s Degree required.

Responsibilities

• Mentor junior cyber security analysts.
• Build and maintain processes and procedures.
• Drive complex cybersecurity incidents to successful conclusion.
• Collaborate with global team members.
• Lead large-scale technical projects.
• Develop Root Cause and Corrective Action Reports.
• Serve as part of a Global On-Call Rotation.
• Threat Hunting

Skills

DFIR

Incident Command

Triage

Mentoring

Executive Presentations

Technical Training

Threat Hunting

SIEM/SOAR/EDR

Cloud Security

Container Security

Python

PowerShell

Education

Bachelor’s Degree

Tools

SIEM

SOAR

EDR

Docker

Kubernetes

Azure

AWS

Job description

Honeywell Aerospace US LLC seeks a Principle Incident Response Analyst to lead DFIR investigations and serve as Incident Commander, guiding triage and response across global teams. The role emphasizes mentoring, developing incident playbooks, and reporting Root Cause analyses. The position can be based in Phoenix, AZ or work remotely, reporting to the Sr.

Director of Cyber Security. Candidates should have extensive DFIR experience, strong executive communication, and a track record of driving