> Markdown version of [/jobs/ext/2853718-sr-advanced-cyber-security-architect-engineer](https://www.wearedevelopers.com/jobs/ext/2853718-sr-advanced-cyber-security-architect-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Sr Advanced Cyber Security Architect Engineer - **Company:** Honeywell International Inc. - **Location:** Duluth, GA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** CompTIA Security+, Cyber Security, Supervisory Control and Data Acquisition (SCADA), Networking Hardware, Intrusion Detection Systems, Python (Programming Language), Security Information and Event Management, Scripting, Malware, Firewalls (Computer Science), Information Technology, Cybercrime, Email Notifications, Network Server, Security Orchestration, Automation & Response - **Published:** September 11, 2026 - **Apply:** https://dejobs.org/x/x/350670AB07564DD39106E1671486C263/job/ ## About the Role The position requires very good cyber security knowledge, excellent analytical skills and proficient handling of specific tools such as SIEMs and Security Orchestration, Automation and Response platforms. A successful candidate would be able to evaluate security incidents and determine true positives situations within an environment and provide context enrichment service before escalation to Level 3 Cyber Security Incident Response team as needed., * 7+ years of experience in Information Technology, cybersecurity, or a related technical field. * 5+ years of experience working in a Security Operations Center (SOC), cybersecurity operations, incident response, or a related security function. * 5+ years of experience working with Security Information and Event Management (SIEM) or Security Orchestration, Automation and Response (SOAR) technologies. * 5+ years of experience developing or implementing security automation using Python, SOAR platforms, or similar technologies., * Bachelor's degree in Computer Science, Computer Information Systems, Electronics, or a related field. * ITIL Foundation certification or a cybersecurity certification such as CompTIA Security+, GCIH, CCNA, GCFA, or CEH. * Experience with SIEM platforms and security logging solutions such as Swimlane, Sentinel, or GOOGLE SECOPS., Due to compliance with U.S. export control laws and regulations, candidate must be a U.S. Person, which is defined as, a U.S. citizen, a U.S. permanent resident, or have protected status in the U.S. under asylum or refugee status or have the ability to obtain an export authorization. ## Description This position will be a part of the Industrial Cyber-Security team and will participate in delivering and developing cyber security services for a wide range of industrial global customers. The position will have a direct reporting relationship to the Global Security Operation Center Manager and Incident Response Lead and work as part of a global managed services team., You will report directly to our Sr. Cyber Security Manager and you'll work out of our Duluth, GA. location on a Hybrid work schedule., * Monitors SIEM, trouble tickets / email notifications and in-person escalations, logs from ICS infrastructure components (SCADA, HMI, PLC, RTU, Control Servers), applications or network devices such as switches, firewalls, IDS/IPS; * Design, implement, test Security Orchestration, Automation and Response processes and procedures; * SOAR playbook development and troubleshoot automation capabilities; * Examine the escalated tickets to determine if they are true positive or false positives. * Performs malware analysis, threat hunting and threat modeling activities; * Assist forensic investigation by providing reports and other information; * Reviews and suggests improvements to control deployment process and installation procedures * Develops and documents remediation recommendations for business owners to improve the control environment in which a security incident occurs. Recommendations must be easily understood by non-technical staff; * Provide recommendations and direction on the tuning of signatures, rules, alerts, parsers, and custom scripts within the monitoring solutions;Participates in root cause analysis and helps with the orchestration of remediation; * Understand defense in depth strategies and apply those to Client's environment;Creates and disseminates security related notifications for internal staff (for example: trends, developments, changes in capabilities); * Acts as L2 Escalation layer in the SOC. * Mentors Level 1 SOC Analysts; * Creates manuals, guides and knowledge base entries; * Keep abreast of latest security and privacy legislation, emerging threats, regulations, advisories, alerts, and vulnerabilities pertaining to HCE OT IR SOC and its customers; * Remains knowledgeable of our current solution portfolio and the technical specificities of our offerings. ## Related Videos - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Enhancing Workload Security in Kubernetes](https://www.wearedevelopers.com/videos/356-enhancing-workload-security-in-kubernetes) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see) - [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)