Lead Cyber Security Architect/Engineer

Are you passionate about helping to drive global Cybersecurity innovation and change? Do you thrive in environments that encourage critical thinking, creativity, and challenging the status quo?

Honeywell Cyber Fusion Center is looking for a Lead cyber security architect/Eng to join the cyber security incident response team. In this role, you will be responsible for leading complex incident investigations through advanced investigative capabilities, architectural expertise, and strategic security improvements to strengthen enterprise resilience. This person will help coordinate globally with multiple teams to defend Honeywell from cyber-attacks.

This position allows deep insight into various aspects of cyber security and will require attention to detail, a sense of urgency, and strong communication skills.

Duties and Responsibilities

• Provide technical guidance and mentorship to support project team members
• Oversee the execution of cybersecurity initiatives and projects
• Ensure projects are delivered on time and within scope
• Conduct regular security assessments and risk analysis
• Identify vulnerabilities and recommend mitigation strategies
• Ensure compliance with industry standards and regulations
• Collaborate with stakeholders to understand and address security requirements
• Perform analysis, identification, remediation, and documentation of network intrusions and computer system compromises.
• Handle incident escalations as necessary. Project manage incident response and coordinate remediation with owners.
• Perform malware analysis and forensic analysis of network activity, disks, and memory.
• Contribute to the creation of security awareness materials for the organization
• Drive strategic security improvements based on incident learnings, threat intelligence, and risk assessments.
• Collaborate with global team members based in the Europe, India and US.
• Support security audits, tabletop exercises, and incident readiness initiatives.

Key Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, or equivalent experience.
• 6+ years of experience in a lead cyber security role
• In-depth knowledge of cybersecurity technologies, frameworks, and best practices
• Excellent communication and ability to convey complex technical concepts to stakeholders
• Ability to lead direct and indirect reports by influence
• 5+ years of experience in Incident Commanding / Response.
• 5+ years in any of the following:
• Network and Host Forensics Operating Systems (Windows, Linux, macOS).
• Log Analysis
• Malware Analysis
• Advanced incident handling and crisis management
• Strong analytical skills with the ability to manage incidents under pressure.

WE VALUE

• Experience with SOAR Solutions like XSOAR/Demisto.
• Knowledge in cloud security (Azure, AWS, MS Office 365).
• Knowledge of Linux operating system.
• One or more widely recognized certifications from renowned institutions such as GIAC/SANS, ISC/CISSP, CISM or Microsoft.
• Detailed knowledge of Endpoint Detection and Response tools (e.g., Sentinel or MS Defender ATP).
• Knowledge of scripting in Python or PowerShell.
• Understanding of ITIL process, such as Incidents, Change & Problem management.
• Experience in working in a global, process-driven organization.
• Demonstrated leadership skills and experience managing cybersecurity teams
• Strong communication and interpersonal skills, with the ability to convey complex technical concepts to non-technical stakeholders