{"id":2999900,"url":"https://alion.io/job/honeywell-advanced-cyber-security-architectengineer-mfd-2","title":"Advanced Cyber Security Architect/Engineer (m/f/d)","company":{"id":15856,"name":"Honeywell","domain":"honeywell.com","url":"https://alion.io/company/honeywell-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":79,"open_postings":89,"ghost_share":0,"stale_share":0.82,"repost_share":0,"time_to_fill_p50_days":25,"computed_at":"2026-10-23T05:54:15Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bucharest, Romania"],"countries":["RO"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":45000,"max_usd":110000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":672},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Defense in Depth","optional":false},{"name":"DNP3","optional":false},{"name":"ITIL","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-10-21T11:11:24Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-10-23T20:04:12Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"We have an opportunity for an Advanced Cyber Security Architect/Engineer to join us at Honeywell, in Bucharest, Romania.\nThis position will be a part of the Industrial Cyber-Security team and will participate in delivering and developing cyber security services for a wide range of industrial global customers. The position will have a direct reporting relationship to the Global Security Operation Center Manager and Incident Response Lead and work as part of a global managed services team. The position requires very good cyber security knowledge, excellent analytical skills and proficient handling of specific tools such as SIEMs and Security Orchestration, Automation and Response platforms. A successful candidate would be able to evaluate security incidents and determine true positives situations within an environment and provide context enrichment service before escalation to Level 3 Cyber Security Incident Response team as needed.\nHoneywell\nWe have been innovating for more than 100 years and now we’re creating what’s next. Our programs serve a global community and our hometowns too. We provide resources and financial support to causes around the world and encourage employee volunteerism. We are committed to the highest standard in everything we do!\nKey responsibilities\nMonitors SIEM, trouble tickets / email notifications and in-person escalations, logs from ICS infrastructure components (SCADA, HMI, PLC, RTU, Control Servers), applications or network devices such as switches, firewalls, IDS/IPS;\nDesign, implement, test Security Orchestration, Automation and Response processes and procedures;\nSOAR playbook development and troubleshoot automation capabilities;\nExamine the escalated tickets to determine if they are true positive or false positives.\nPerforms malware analysis, threat hunting and threat modeling activities; \nAssist forensic investigation by providing reports and other information;\nReviews and suggests improvements to control deployment process and installation procedures \nDevelops and documents remediation recommendations for business owners to improve the control environment in which a security incident occurs. Recommendations must be easily understood by non-technical staff;\nProvide recommendations and direction on the tuning of signatures, rules, alerts, parsers, and custom scripts within the monitoring solutions;\nParticipates in root cause analysis and helps with the orchestration of remediation;\nUnderstand defense in depth strategies and apply those to Client’s environment;\nCreates and disseminates security related notifications for internal staff (for example: trends, developments, changes in capabilities);\nActs as L2 Escalation layer in the SOC.\nMentors Level 1 SOC Analysts;\nCreates manuals, guides and knowledge base entries;\nKeep abreast of latest security and privacy legislation, emerging threats, regulations, advisories, alerts, and vulnerabilities pertaining to HCE OT IR SOC and its customers;\nRemains knowledgeable of our current solution portfolio and the technical specificities of our offerings.\n Key skills and qualifications\nBachelor’s degree in a computer related field such as Computer Science, Computer information systems or electronics;\nMinimum of 3 years’ experience in cyber security SOC industry;\nMinimum of 5 years’ experience in Information Technology;\nStrong diagnostic and analytical skills including problem solving, trouble shooting, management of priorities and self-direction to resolve complex issues;\nEffective written and verbal skill to enable strong communication capabilities;\nInformation Technology certifications: ITIL Foundations;\nSecurity Certifications: CCNA, CompTIA Security+, GCIH, or other similar certifications;\nExperience to automate tasks and integrate systems with Python;\nExperience with SPLUNK or CHRONICLE SIEM platforms and logging solutions;\nGCFA or CEH or other similar certifications;\nUnderstand Advanced SOAR methodology;\nUnderstand ICS communication protocols such as Modbus, Profibus, DNP3, S7comm and others.\nAdditional Qualifications\nAbility to write documentation and summaries;\nExperience working in a client facing Cyber SOC environment;\nExperience securing industrial or corporate networks and assets against cyber threats;\nKnowledge of ICS environments;\nKnowledge of cybersecurity frameworks such as MITRE ATT&CK, MITRE for ICS and NIST. \nResult oriented;\nProactive;\nCritical reasoning;\nAbility to work with minimal supervision;\nSelf-learner, self-motivated;\nDetail oriented.\nOur offer:\nCompetitive Salary regularly increased based on your performance\nEnjoy 25 vacation days per year, plus extra days off for life's special events\nWe provide meal vouchers\nFlexible benefits basket with monthly budget allocated (top up medical insurance, life insurance, pension, vacation/ cultural/ fuel vouchers)\nMedical Insurance Plan paid by the company\nChristmas and Easter bonuses\nRecognition & referral bonus programs\nComprehensive induction, ongoing training and development to set you up for success\nIn-house and external learning platforms (Udemy) to continue to expand your skills\nWork experience opportunities to help you grow your career with us\nGlobal employee networks to help you connect and grow\nEmployee Assistance Program - Free and confidential service to help with any difficulties regarding work, life and personal or family matters\nIn case of unfortunate events, we support you by offering you free days and financial support (handled on a case by case basis) or Family financial aids\nAccess Integrity line - Any workplace issues or violations that need to be raised in good faith, can be communicated in a safe, private and confidential environment\nYour family is growing while working at Honeywell? We congratulate you by offering special bonuses\nFrequent Employee Engagement activities fostering an inclusive and diverse work environment\nEqual Opportunity Statement\nWe are an equal opportunity employer and value diversity at our company. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.\nWe will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.\nJoin us now and be part of a global team of thinkers, innovators, dreamers, and doers who make the things that make the future!","description_format":"text","description_chars":6554,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Health insurance","Life insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Smart Building & Cities","Aerospace Manufacturing","Incident Response"],"lifecycle":[{"event":"open","at":"2026-10-21T11:49:14Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":1,"expected_fill_days":25,"reasons":["conf:2","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-23T05:54:15Z"},"pay":null,"html_url":"https://alion.io/job/honeywell-advanced-cyber-security-architectengineer-mfd-2","json_url":"https://alion.io/job/honeywell-advanced-cyber-security-architectengineer-mfd-2.json","meta":{"generated_at":"2026-10-23T22:02:17Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4557,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":15856},"rest":"https://alion.io/mcp/rest/get_company?id=15856"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhoneywell-advanced-cyber-security-architectengineer-mfd-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhoneywell-advanced-cyber-security-architectengineer-mfd-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhoneywell-advanced-cyber-security-architectengineer-mfd-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/honeywell-advanced-cyber-security-architectengineer-mfd-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhoneywell-advanced-cyber-security-architectengineer-mfd-2"}]}