Senior Industrial Cyber Security Architect & SOAR Lead

Honeywell INC. in; Duluth (GA); Hybrid; USD 140,000 - 200,000; Full time

Benefits offered by this job

Hybrid work schedule

Comprehensive benefits package

Job summary

Honeywell in Duluth, GA is seeking a Sr Advanced Cyber Security Architect Engineer (Finance) to join the Industrial Cyber-Security team on a hybrid schedule. You will deliver and develop cyber security services for global industrial customers.

Report to the Global Security Operations Center Manager and Incident Response Lead, working with a global managed services team. You will apply SIEM/SOAR tools, malware analysis, threat hunting, and incident response to protect critical infrastructure.

Qualifications

• 7+ years of experience in Information Technology, cybersecurity, or a related technical field.
• 5+ years in a SOC, cybersecurity operations, incident response, or related security function.
• 5+ years with SIEM or SOAR technologies.
• 5+ years developing or implementing security automation using Python, SOAR platforms, or similar technologies.

Responsibilities

• Monitor SIEM, trouble tickets / emails, escalations, and logs from ICT infrastructure and network devices.
• Design, implement, test SOAR processes and procedures.
• Develop and troubleshoot SOAR playbooks and automation capabilities.
• Perform malware analysis, threat hunting, and threat modeling activities.
• Provide remediation recommendations and assist in root-cause analysis.

Skills

SIEM

SOAR

Python scripting

Cybersecurity operations

Education

Bachelor's degree

ITIL/Security certification

Tools

Swimlane

Sentinel

GOOGLE SECOPS

Job description

Honeywell in Duluth, GA is seeking a Sr Advanced Cyber Security Architect Engineer (Finance) to join the Industrial Cyber-Security team on a hybrid schedule. You will deliver and develop cyber security services for global industrial customers.

Report to the Global Security Operations Center Manager and Incident Response Lead, working with a global managed services team. You will apply SIEM/SOAR tools, malware analysis, threat hunting, and incident response to protect critical infrastructure.