Principle Incident Response Analyst

Honeywell Aerospace • Phoenix, AZ

1d • Remote

About The Position

As a Principle Incident Response Analyst at Honeywell Aerospace, you will conduct detailed analysis of cybersecurity data and provide insights, with a focus on Digital Forensics and Incident Response (DFIR). You will act as an Incident Commander, lead incidents, and conduct triage to identify potential threats and vulnerabilities. The role supports effective security measures that protect critical assets and information across industries.

As part of the Cybersecurity Incident Response Team (CIRT), you will lead incident investigations, work closely with senior leadership, support the development of junior team members, and contribute to cybersecurity strategies and initiatives. The position reports directly to the Sr. Director of Cyber Security and can be based in Phoenix, Arizona, or performed remotely. It includes participation in a global on-call rotation.

Requirements

• Must be a U.S. Person (a U.S. citizen, U.S. permanent resident, or person with protected status in the U.S. under asylum or refugee status) or have the ability to obtain an export authorization.
• At least 5 years of incident commanding or response experience.
• At least 5 years of experience in one or more of the following: network and host forensics; Windows, Linux, or macOS operating systems; automation using tools such as Python, Shell, or PowerShell; log analysis; malware analysis; presentations to executive leadership; or technical training and mentoring.
• At least 2 years of professional experience presenting to executive leadership and providing technical training or mentoring.
• Bachelor’s degree.

Nice To Haves

• Experience with SIEM, SOAR, and EDR solutions.
• Experience with cloud and container security, including Azure, AWS, O365, Docker, or Kubernetes.
• Reverse engineering malware experience.
• Strong critical-thinking and problem-solving skills.

Responsibilities

• Mentor junior cybersecurity analysts.
• Build and maintain processes and procedures.
• Drive complex cybersecurity incidents to successful conclusion.
• Collaborate with global team members.
• Lead large-scale technical projects.
• Develop Root Cause and Corrective Action Reports.
• Serve as part of a Global On-Call Rotation.
• Conduct threat hunting.

Benefits

• Employer-subsidized medical, dental, vision, and life insurance.
• Short-term and long-term disability coverage.
• 401(k) match.
• Flexible spending accounts and health savings accounts.
• Employee assistance program.
• Educational assistance.
• Parental leave.
• 12 paid holidays.
• Paid time off for vacation, personal, and sick time.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior