Senior Industrial Cyber Security Architect & SOAR Lead

Honeywell Technologies; Duluth (GA); Hybrid; USD 110,000 - 180,000; Full time

Benefits offered by this job

Medical Insurance

401(k) match

Paid Holidays

Job summary

Honeywell Technologies in Duluth, GA is seeking an experienced cyber security professional to join the Industrial Cyber-Security team. You will contribute to delivering and developing cyber security services for global industrial customers, reporting to the Global SOC Manager and Incident Response Lead in a hybrid work setup.

The role requires strong knowledge of SIEM/SOAR, incident evaluation, malware analysis, and hands-on remediation guidance for business owners, with mentoring of Level 1

Qualifications

• 7+ years of experience in Information Technology, cybersecurity, or a related technical field.
• 5+ years in a Security Operations Center (SOC), cybersecurity operations, incident response, or related security function.
• 5+ years with SIEM or SOAR technologies.
• 5+ years of security automation using Python, SOAR platforms, or similar technologies.

Responsibilities

• Monitors SIEM, trouble tickets / email notifications and in-person escalations, logs from ICS infrastructure components (SCADA, HMI, PLC, RTU, Control Servers), applications or network devices.
• Design, implement, test Security Orchestration, Automation and Response processes and procedures.
• SOAR playbook development and troubleshoot automation capabilities.
• Examine escalated tickets to determine true positives or false positives.
• Performs malware analysis, threat hunting and threat modeling activities.
• Assist forensic investigation by providing reports and other information.
• Reviews and suggests improvements to control deployment process and installation procedures.
• Develops and documents remediation recommendations for business owners to improve the control environment.
• Provide recommendations and direction on tuning of signatures, rules, alerts, parsers, and custom scripts within monitoring solutions.
• Participates in root cause analysis and helps with remediation orchestration.
• Understand defense in depth strategies and apply to Client’s environment.
• Creates and disseminates security related notifications for internal staff.
• Acts as L2 Escalation layer in the SOC.
• Mentors Level 1 SOC Analysts.

Skills

SOC Operations

SIEM

SOAR

Python

Threat Analysis

Education

Bachelor's degree in CS/IS

ITIL Foundation

Security Certification (Security+)

Job description

Honeywell Technologies in Duluth, GA is seeking an experienced cyber security professional to join the Industrial Cyber-Security team. You will contribute to delivering and developing cyber security services for global industrial customers, reporting to the Global SOC Manager and Incident Response Lead in a hybrid work setup.

The role requires strong knowledge of SIEM/SOAR, incident evaluation, malware analysis, and hands-on remediation guidance for business owners, with mentoring of Level 1