Senior Industrial Cyber Security Architect & SOAR Lead

Honeywell Technologies; Duluth (GA); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, Dental, Vision, LifeInsurance

401(k) match

Paid Holidays

Job summary

Honeywell Technologies in Duluth, GA is seeking an experienced cyber security professional to join the Industrial Cyber-Security team. You will deliver and develop cyber security services for global industrial customers and report to the Global Security Operation Center Manager and Incident Response Lead in a hybrid work setting.

You will work with SIEMs and SOAR platforms, evaluate incidents, and provide context enrichment before escalation to Level 3 IR as needed.

Qualifications

• 7+ years of experience in Information Technology, cybersecurity, or a related technical field.
• 5+ years in a Security Operations Center (SOC) or related security function.
• 5+ years with SIEM or SOAR technologies.
• 5+ years developing or implementing security automation using Python or SOAR platforms.

Responsibilities

• Monitors SIEM, trouble tickets / email notifications and escalations, logs from ICs infrastructure components (SCADA, HMI, PLC, RTU, Control Servers), applications or network devices.
• Design, implement, test Security Orchestration, Automation and Response processes and procedures.
• SOAR playbook development and troubleshooting automation capabilities.
• Examine escalated tickets to determine true positives or false positives.

Skills

Senior IT/cybersecurity experience

SOC/IR operations

SIEM/SOAR proficiency

Security automation with Python

Education

Bachelor’s degree in CS/IS/ Electronics

ITIL Foundation or cybersecurity certification (e.g., Security+, GCIH, CCNA, GCFA, CEH)

Tools

Swimlane

Sentinel

Google Cloud SECOPS

Job description

Honeywell Technologies in Duluth, GA is seeking an experienced cyber security professional to join the Industrial Cyber-Security team. You will deliver and develop cyber security services for global industrial customers and report to the Global Security Operation Center Manager and Incident Response Lead in a hybrid work setting.

You will work with SIEMs and SOAR platforms, evaluate incidents, and provide context enrichment before escalation to Level 3 IR as needed.