EndereçoJoin a team recognized for leadership, innovation and diversity
Are you passionate about leading global Cybersecurityinnovation and change? Do you thrive in environments that encouragecritical thinking, creativity, and challenging the status quo?
Honeywell's CyberFusion Center is looking for a LeadCyber Security Architect/Engineer to work as part ofour L3 incident response team. This person is responsible for driving complexcybersecurity incidents that span multiple service towers to successfulcompletion. This person will coordinate globally with multiple teams to defendHoneywell from cyber attacks.
Thisposition allows deep insight into various aspects of Cyber Security and willrequire attention to detail, a sense of urgency, and strong communicationskills.
This rolerequires participation in 24x7 shift rotation.
Key Responsibilities:
- Participate on a team of highly skilled cybersecurity incident responders
- Build and maintain processes and procedures
- Drive complex cybersecurity incidents to successful conclusion
- Understand root causes and work with various service towers to improve
- Perform initial analysis, identification, and remediation of network intrusions, application attacks, and computer system compromises.
- Mentor junior analysts in our L1 and L2 teams to build a pipeline of talent that flows into L3
- Constantly optimize work procedures and automate recurring tasks. Develop and update technical documentation and formulate work instructions to address repeating issues.
- Collaborate with global team members based in the US, India and Europe.
- Serve as part of a 24/7 shift support
- Participate in global on-call rotation
U.S. PERSON REQUIREMENTS
Due to compliance with U.S. export control laws and regulations, candidate must be a U.S. Person, which is defined as, a U.S. citizen, a U.S. permanent resident, or have protected status in the U.S. under asylum or refugee status.
YOU MUST HAVE:
- Bachelor’s degree in Cybersecurity, Computer Science, or equivalent experience.
- 3+ years of experience in Information Security or Information Technology fields.
- 3+ years of experience in a cybersecurity role
- Experience with SIEM and EDR solutions.
- English language proficiency
- Good technical knowledge of Windows/Linux operating systems, various types of applications, and networking technologies
- Analytical skills in threat, vulnerability, and intrusion detection analysis.
- Keen understanding of threat vectors as well as exfiltration techniques.
- Attention to detail
- Ability to develop and follow complex work instructions and documentation
- Willingness to learn.
WE VALUE:
- Experience with SOAR Solutions like XSOAR/Demisto.
- Knowledge in cloud security (Azure, AWS, MS Office 365).
- Knowledge of Linux operating system.
- Experience with dynamic and static malware analysis
- One or more widely recognized certifications from renowned institutions such as GIAC/SANS, ISC/CISSP or Microsoft.
- Detailed knowledge of Endpoint Detection and Response tools (e.g., Crowdstrike Falcon, Carbon Black, FireEye HX or Windows Defender ATP).
- Knowledge of scripting in Python or Powershell.
- Understanding of ITIL process, such as Incidents, Change & Problem management.
- Experience in working in a global, process-driven organization.
Additional Information
- JOB ID: HRD221063
- Category: Engineering
- Location: 1300 W Warner Rd.,Tempe,Arizona,85284,United States
- Exempt
- Due to US export control laws, must be a US citizen, permanent resident or have protected status.
Honeywell is an equal opportunity employer. Qualified applicants will be considered without regard to age, race, creed, color, national origin, ancestry, marital status, affectional or sexual orientation, gender identity or expression, disability, nationality, sex, religion, or veteran status.
