Sr Advanced Cyber Security Architect Engineer
Job Fit Check
Base Career helps you apply smarter for this job.
Key skills for this role
About the Role
This position will be a part of the Industrial Cyber-Security team and will participate in delivering and developing cyber security services for a wide range of industrial global customers. You will report directly to our Sr. Cyber Security Manager and you’ll work out of our Duluth, GA. location on a Hybrid work schedule.
Key Skills for This Role
Full Job Posting
Responsibilities
- KEY RESPONSIBILITIES
- Monitors SIEM, trouble tickets / email notifications and in-person escalations, logs from ICS infrastructure components (SCADA, HMI, PLC, RTU, Control Servers), applications or network devices such as switches, firewalls, IDS/IPS;
- Design, implement, test Security Orchestration, Automation and Response processes and procedures;
- SOAR playbook development and troubleshoot automation capabilities;
- Examine the escalated tickets to determine if they are true positive or false positives.
- Performs malware analysis, threat hunting and threat modeling activities;
- Assist forensic investigation by providing reports and other information;
- Reviews and suggests improvements to control deployment process and installation procedures
- Develops and documents remediation recommendations for business owners to improve the control environment in which a security incident occurs. Recommendations must be easily understood by non-technical staff;
- Provide recommendations and direction on the tuning of signatures, rules, alerts, parsers, and custom scripts within the monitoring solutions;
- Participates in root cause analysis and helps with the orchestration of remediation;
- Understand defense in depth strategies and apply those to Client’s environment;
- Creates and disseminates security related notifications for internal staff (for example: trends, developments, changes in capabilities);
- Acts as L2 Escalation layer in the SOC.
- Mentors Level 1 SOC Analysts;
- Creates manuals, guides and knowledge base entries;
- Keep abreast of latest security and privacy legislation, emerging threats, regulations, advisories, alerts, and vulnerabilities pertaining to HCE OT IR SOC and its customers;
- Remains knowledgeable of our current solution portfolio and the technical specificities of our offerings.
- KEY RESPONSIBILITIES - Monitors SIEM, trouble tickets / email notifications and in-person escalations, logs from ICS infrastructure components (SCADA, HMI, PLC, RTU, Control Servers), applications or network devices such as switches, firewalls, IDS/IPS; - Design, implement, test Security Orchestration, Automation and Response processes and procedures; - SOAR playbook development and troubleshoot automation capabilities; - Examine the escalated tickets to determine if they are true positive or false positives. - Performs malware analysis, threat hunting and threat modeling activities; - Assist forensic investigation by providing reports and other information; - Reviews and suggests improvements to control deployment process and installation procedures - Develops and documents remediation recommendations for business owners to improve the control environment in which a security incident occurs. Recommendations must be easily understood by non-technical staff; - Provide recommendations and direction on the tuning of signatures, rules, alerts, parsers, and custom scripts within the monitoring solutions; - Participates in root cause analysis and helps with the orchestration of remediation; - Understand defense in depth strategies and apply those to Client’s environment; - Creates and disseminates security related notifications for internal staff (for example: trends, developments, changes in capabilities); - Acts as L2 Escalation layer in the SOC. - Mentors Level 1 SOC Analysts; - Creates manuals, guides and knowledge base entries; - Keep abreast of latest security and privacy legislation, emerging threats, regulations, advisories, alerts, and vulnerabilities pertaining to HCE OT IR SOC and its customers; - Remains knowledgeable of our current solution portfolio and the technical specificities of our offerings.
Qualifications
- YOU MUST HAVE
- 7+ years of experience in Information Technology, cybersecurity, or a related technical field.
- 5+ years of experience working in a Security Operations Center (SOC), cybersecurity operations, incident response, or a related security function.
- 5+ years of experience working with Security Information and Event Management (SIEM) or Security Orchestration, Automation and Response (SOAR) technologies.
- 5+ years of experience developing or implementing security automation using Python, SOAR platforms, or similar technologies.
- WE VALUE
- Bachelor’s degree in Computer Science, Computer Information Systems, Electronics, or a related field.
- ITIL Foundation certification or a cybersecurity certification such as CompTIA Security+, GCIH, CCNA, GCFA, or CEH.
- Experience with SIEM platforms and security logging solutions such as Swimlane, Sentinel, or GOOGLE SECOPS.
- BENEFITS OF WORKING FOR HONEYWELL
- In addition to a competitive salary, leading-edge work, and developing solutions side-by-side with dedicated experts in their fields, Honeywell employees are eligible for a comprehensive benefits package. This package includes employer subsidized Medical, Dental, Vision, and Life Insurance; Short-Term and Long-Term Disability; 401(k) match, Flexible Spending Accounts, Health Savings Accounts, EAP, and Educational Assistance; Parental Leave, Paid Time Off (for vacation, personal business, sick time, and parental leave), and 12 Paid Holidays. Learn more (https://benefits.honeywell.com/) The application period for the job is estimated to be 40 days from the job posting date; however, this may be shortened or extended depending on business needs and the availability of qualified candidates.
- ABOUT HONEYWELL
- Honeywell International Inc. (Nasdaq: HON) invents and commercializes technologies that address some of the world's most critical challenges around energy, safety, security, productivity, and global urbanization. We are a leading software-industrial company committed to introducing state of the art technology solutions to improve efficiency, productivity, sustainability, and safety in high growth businesses in broad-based, attractive industrial end markets. Our products and solutions enable a safer, more comfortable, and more productive world, enhancing the quality of life of people around the globe. Learn more (https://www.honeywell.com/us/en)
- U.S. PERSON REQUIREMENTS
- Due to compliance with U.S. export control laws and regulations, candidate must be a U.S. Person, which is defined as, a U.S. citizen, a U.S. permanent resident, or have protected status in the U.S. under asylum or refugee status or have the ability to obtain an export authorization.
- YOU MUST HAVE - 7+ years of experience in Information Technology, cybersecurity, or a related technical field. - 5+ years of experience working in a Security Operations Center (SOC), cybersecurity operations, incident response, or a related security function. - 5+ years of experience working with Security Information and Event Management (SIEM) or Security Orchestration, Automation and Response (SOAR) technologies. - 5+ years of experience developing or implementing security automation using Python, SOAR platforms, or similar technologies. WE VALUE - Bachelor’s degree in Computer Science, Computer Information Systems, Electronics, or a related field. - ITIL Foundation certification or a cybersecurity certification such as CompTIA Security+, GCIH, CCNA, GCFA, or CEH. - Experience with SIEM platforms and security logging solutions such as Swimlane, Sentinel, or GOOGLE SECOPS. BENEFITS OF WORKING FOR HONEYWELL In addition to a competitive salary, leading-edge work, and developing solutions side-by-side with dedicated experts in their fields, Honeywell employees are eligible for a comprehensive benefits package. This package includes employer subsidized Medical, Dental, Vision, and Life Insurance; Short-Term and Long-Term Disability; 401(k) match, Flexible Spending Accounts, Health Savings Accounts, EAP, and Educational Assistance; Parental Leave, Paid Time Off (for vacation, personal business, sick time, and parental leave), and 12 Paid Holidays. Learn more (https://benefits.honeywell.com/) The application period for the job is estimated to be 40 days from the job posting date; however, this may be shortened or extended depending on business needs and the availability of qualified candidates. ABOUT HONEYWELL Honeywell International Inc. (Nasdaq: HON) invents and commercializes technologies that address some of the world's most critical challenges around energy, safety, security, productivity, and global urbanization. We are a leading software-industrial company committed to introducing state of the art technology solutions to improve efficiency, productivity, sustainability, and safety in high growth businesses in broad-based, attractive industrial end markets. Our products and solutions enable a safer, more comfortable, and more productive world, enhancing the quality of life of people around the globe. Learn more (https://www.honeywell.com/us/en) U.S. PERSON REQUIREMENTS Due to compliance with U.S. export control laws and regulations, candidate must be a U.S. Person, which is defined as, a U.S. citizen, a U.S. permanent resident, or have protected status in the U.S. under asylum or refugee status or have the ability to obtain an export authorization.
About Honeywell
Honeywell is a global industrial technology company that provides products, software and solutions for building, process and industrial automation. Its technologies help customers improve safety, productivity, energy efficiency and operational reliability.
Visit company websiteJobs and hiring trendsApply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Honeywell
Field Service Supervisor - Security
Melbourne, AUS
The Field Service Supervisor is responsible for managing the daily operations of the field service team, ensuring that all service requests are handled promptly and efficiently.
Program Principal
Houston, USA
Lead and deliver complex Honeywell automation and technology development Projects/ programs as a core member of a high‐performing, global program team. Operate with minimal oversight to drive large‐scale, cross‐functiona
Gas Leak Survey Technician II
Louisville, USA
As a Gas Leak Survey Technician II here at Honeywell, you will have the opportunity to provide top-notch service and support to our customers by troubleshooting, repairing, and maintaining our advanced systems and equipm
HVAC Fitter Apprentice (Union) 3rd Year
Richmond, USA
As an Apprentice HVAC Technician here at Honeywell, you will gain valuable hands-on experience and training in Heating, Ventilation, and Air Conditioning (HVAC) systems while working alongside industry-leading profession
Machine Shop Supervisor
Arvada, USA
As a Machine Shop Supervisor here at Honeywell, you will play a pivotal role in ensuring that our machining processes run efficiently, safely, and in accordance with quality standards, while optimizing production schedul
Spécialiste bilingue en intégration de systèmes connectés
Québec, CAN
En tant que Spécialiste bilingue en intégration de systèmes connectés chez Honeywell, votre responsabilité principale sera de fournir un soutien technique et des services à nos clients. Cela comprend le diagnostic et la
Embedded Engr I
, IND
Embedded Engineer I Accidental gas leaks pose a huge threat to properties, environment and human life. Therefore, Honeywell manufactures a full and comprehensive range of gas detection products dedicated to all types of
Software Engineer II
Atlanta, USA
As an Advanced Software Engineer here at Honeywell, you will play a pivotal role in designing, developing, and implementing sophisticated software solutions that drive innovation and efficiency across our global operatio
Field Service Supervisor - Security
Melbourne, AUS
Program Principal
Houston, USA
Gas Leak Survey Technician II
Louisville, USA
HVAC Fitter Apprentice (Union) 3rd Year
Richmond, USA
Machine Shop Supervisor
Arvada, USA
Spécialiste bilingue en intégration de systèmes connectés
Québec, CAN
Embedded Engr I
, IND
Software Engineer II
Atlanta, USA