{"id":2726733,"url":"https://alion.io/job/honeywell-sr-advanced-cyber-security-architect-engineer","title":"Sr Advanced Cyber Security Architect Engineer","company":{"id":15856,"name":"Honeywell","domain":"honeywell.com","url":"https://alion.io/company/honeywell-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Oracle","truth_index":{"grade":"B","score":79,"open_postings":89,"ghost_share":0,"stale_share":0.82,"repost_share":0,"time_to_fill_p50_days":25,"computed_at":"2026-10-23T05:54:15Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Duluth, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":121000,"max_usd":240000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":414},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Defense in Depth","optional":false},{"name":"Google SecOps","optional":false},{"name":"ITIL","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-10-16T14:20:16Z","employer_posted_date":"2026-10-16","last_verified_at":"2026-10-23T14:50:49Z","board_verified":true,"closed_at":null,"days_open":7,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":7},"description":"This position will be a part of the Industrial Cyber-Security team and will participate in delivering and developing cyber security services for a wide range of industrial global customers. The position will have a direct reporting relationship to the Global Security Operation Center Manager and Incident Response Lead and work as part of a global managed services team.\nYou will report directly to our Sr. Cyber Security Manager and you’ll work out of our Duluth, GA. location on a Hybrid work schedule.\nThe position requires very good cyber security knowledge, excellent analytical skills and proficient handling of specific tools such as SIEMs and Security Orchestration, Automation and Response platforms. A successful candidate would be able to evaluate security incidents and determine true positives situations within an environment and provide context enrichment service before escalation to Level 3 Cyber Security Incident Response team as needed.\n KEY RESPONSIBILITIES\nMonitors SIEM, trouble tickets / email notifications and in-person escalations, logs from ICS infrastructure components (SCADA, HMI, PLC, RTU, Control Servers), applications or network devices such as switches, firewalls, IDS/IPS;\nDesign, implement, test Security Orchestration, Automation and Response processes and procedures;\nSOAR playbook development and troubleshoot automation capabilities;\nExamine the escalated tickets to determine if they are true positive or false positives.\nPerforms malware analysis, threat hunting and threat modeling activities; \nAssist forensic investigation by providing reports and other information;\nReviews and suggests improvements to control deployment process and installation procedures \nDevelops and documents remediation recommendations for business owners to improve the control environment in which a security incident occurs. Recommendations must be easily understood by non-technical staff;\nProvide recommendations and direction on the tuning of signatures, rules, alerts, parsers, and custom scripts within the monitoring solutions;\nParticipates in root cause analysis and helps with the orchestration of remediation;\nUnderstand defense in depth strategies and apply those to Client’s environment;\nCreates and disseminates security related notifications for internal staff (for example: trends, developments, changes in capabilities);\nActs as L2 Escalation layer in the SOC.\nMentors Level 1 SOC Analysts;\nCreates manuals, guides and knowledge base entries;\nKeep abreast of latest security and privacy legislation, emerging threats, regulations, advisories, alerts, and vulnerabilities pertaining to HCE OT IR SOC and its customers;\nRemains knowledgeable of our current solution portfolio and the technical specificities of our offerings.\n YOU MUST HAVE\n7+ years of experience in Information Technology, cybersecurity, or a related technical field.\n5+ years of experience working in a Security Operations Center (SOC), cybersecurity operations, incident response, or a related security function.\n5+ years of experience working with Security Information and Event Management (SIEM) or Security Orchestration, Automation and Response (SOAR) technologies.\n5+ years of experience developing or implementing security automation using Python, SOAR platforms, or similar technologies.\nWE VALUE\nBachelor’s degree in Computer Science, Computer Information Systems, Electronics, or a related field.\nITIL Foundation certification or a cybersecurity certification such as CompTIA Security+, GCIH, CCNA, GCFA, or CEH.\nExperience with SIEM platforms and security logging solutions such as Swimlane, Sentinel, or GOOGLE SECOPS.\nBENEFITS OF WORKING FOR HONEYWELL\nIn addition to a competitive salary, leading-edge work, and developing solutions side-by-side with dedicated experts in their fields, Honeywell employees are eligible for a comprehensive benefits package. This package includes employer subsidized Medical, Dental, Vision, and Life Insurance; Short-Term and Long-Term Disability; 401(k) match, Flexible Spending Accounts, Health Savings Accounts, EAP, and Educational Assistance; Parental Leave, Paid Time Off (for vacation, personal business, sick time, and parental leave), and 12 Paid Holidays. Learn more (https://benefits.honeywell.com/)\nThe application period for the job is estimated to be 40 days from the job posting date; however, this may be shortened or extended depending on business needs and the availability of qualified candidates.\nABOUT HONEYWELL\nHoneywell International Inc. (Nasdaq: HON) invents and commercializes technologies that address some of the world's most critical challenges around energy, safety, security, productivity, and global urbanization. We are a leading software-industrial company committed to introducing state of the art technology solutions to improve efficiency, productivity, sustainability, and safety in high growth businesses in broad-based, attractive industrial end markets. Our products and solutions enable a safer, more comfortable, and more productive world, enhancing the quality of life of people around the globe. Learn more (https://www.honeywell.com/us/en)\nU.S. PERSON REQUIREMENTS\nDue to compliance with U.S. export control laws and regulations, candidate must be a U.S. Person, which is defined as, a U.S. citizen, a U.S. permanent resident, or have protected status in the U.S. under asylum or refugee status or have the ability to obtain an export authorization.","description_format":"text","description_chars":5449,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Hybrid work","Life insurance","Parental leave"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Smart Building & Cities","Aerospace Manufacturing","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-16T16:32:24Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 150 · green card filings: 52","filings_12m":150,"filings_prev_12m":214,"green_card_filings_12m":52,"median_offered_wage_usd":157351,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":15}],"liveness":{"score":62,"band":"ok","label":"Likely open","p_open":1,"p_active":0.619,"p_room":1,"age_days":6,"expected_fill_days":25,"reasons":["conf:2","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-23T05:54:15Z"},"pay":null,"html_url":"https://alion.io/job/honeywell-sr-advanced-cyber-security-architect-engineer","json_url":"https://alion.io/job/honeywell-sr-advanced-cyber-security-architect-engineer.json","meta":{"generated_at":"2026-10-23T15:01:40Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":22643,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":15856},"rest":"https://alion.io/mcp/rest/get_company?id=15856"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhoneywell-sr-advanced-cyber-security-architect-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhoneywell-sr-advanced-cyber-security-architect-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhoneywell-sr-advanced-cyber-security-architect-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/honeywell-sr-advanced-cyber-security-architect-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhoneywell-sr-advanced-cyber-security-architect-engineer"}]}