Cybersecurity Architect/Engineer II

Responsibilities

• Participate in a highly skilled cybersecurity incident response team to analyze and respond to emerging threats.
• Perform initial analysis, identification, and remediation of network intrusions, application attacks, and system compromises.
• Build and maintain security processes, procedures, and technical documentation to optimize work and automate recurring tasks.
• Drive complex cybersecurity incidents to successful conclusion and identify root causes.
• Mentor junior L1 analysts to build a talent pipeline for the L2 team.
• Collaborate with global team members across the US, India, and Europe.
• Participate in a global on-call rotation as part of 24/7 shift support.

Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, or equivalent experience.
• 3+ years of experience in Security Operations, Information Security, or Incident Response.
• Expertise in Splunk or other SIEM tools.
• Expertise in Microsoft Defender for Endpoints (MDE) or other EDR solutions.
• Strong technical knowledge of Windows and Linux operating systems, networking technologies, and various applications.
• Deep understanding of threat vectors, exfiltration techniques, and frameworks such as MITRE ATT&CK and the Cyber Kill Chain.
• Ability to analyze network traffic, endpoint logs, and identity data to identify signs of compromise.
• Excellent written and verbal communication skills for explaining technical analysis to stakeholders.

Preferred Qualifications

• Experience with SOAR solutions like XSOAR/Demisto.
• Knowledge of cloud security environments including Azure, AWS, and MS Office 365.
• Experience in malware analysis, threat intelligence, and memory forensics.
• Proficiency in scripting languages such as Python or PowerShell for automation.
• Relevant industry certifications (e.g., GIAC/SANS, ISC/CISSP, or Microsoft).

About the Company

Honeywell Aerospace is a global leader in aerospace technology, dedicated to integrating security into all aspects of business to protect people, processes, and assets. We thrive on innovation and challenge the status quo to safeguard our mission in an evolving threat landscape.