Principal Incident Response Analyst

Honeywell Aerospace • Petersburg, VA

1d • Hybrid

About The Position

As a Principal Incident Response Analyst at Honeywell Aerospace, you will be instrumental in conducting detailed analysis and providing insights on cybersecurity data. Your role will focus on Digital Forensics and Incident Response (DFIR) as an Incident Commander and lead incidents, where you'll engage in triage activities to identify potential threats and vulnerabilities within our systems. You will ensure the implementation of effective security measures to protect critical assets and information across various industries. Cybersecurity Incident Response Team (CIRT) Are you passionate about leading global Cybersecurity innovation and change? Do you thrive in environments that encourage critical thinking, creativity, and challenging the status quo? We are looking for a Technical Analyst experienced in DFIR and triage processes, capable of conducting thorough incident investigations, working closely with senior leadership, supporting the development of junior team members, and contributing to the organization’s cybersecurity strategies and initiatives. You will report directly to our Sr. Director of Cyber Security, and work out of our Phoenix, AZ location or Remote.

Requirements

• Minimum of 3 plus years Technical experience
• At least 5 years: Incident Commanding / Response
• At least 5 plus years in any of the following: Network and Host Forensics, Operating Systems (Windows, Linux, macOS), Automation (e.g., Python, Shell, PowerShell), Log Analysis, Malware Analysis, Presentations to Executive Leadership, Technical Training / Mentoring
• Bachelor's Degree
• Professional (2 Plus Years): Presentations to Executive Leadership, Technical Training/Mentoring

Nice To Haves

• Experience with SIEM, SOAR, and EDR Solutions
• Cloud & Container Security (Azure, AWS, O365, Docker, Kubernetes)
• Reverse Engineering Malware
• Strong Critical Thinker & Problem Solver

Responsibilities

• Mentor junior cyber security analysts
• Build and maintain processes and procedures.
• Drive complex cybersecurity incidents to successful conclusion.
• Collaborate with global team members.
• Lead large-scale technical projects.
• Develop Root Cause and Corrective Action Reports.
• Serve as part of a Global On-Call Rotation.
• Threat Hunting

Benefits

• Employer-subsidized medical, dental, vision and life insurance
• Short-term and long-term disability coverage
• 401(k) match, flexible spending accounts and health savings accounts
• Employee assistance program and educational assistance
• Parental leave and 12 paid holidays
• Paid time off for vacation, personal and sick time

What This Job Offers

• Job Type: Full-time
• Career Level: Principal