Advanced Cyber Security Architect – Engineer

Honeywell

Advanced Cybersecurity Architect/Engineer at Honeywell developing cyber security services for industrial customers. Engaging in incident response and system monitoring in a hybrid role.

Posted 7/22/2026full-timeBucharest • 🇷🇴 RomaniaMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Security Orchestration, Automation and Response (SOAR) processes, malware analysis, and threat hunting, while effectively communicating complex security concepts to non-technical stakeholders. Proficient in utilizing SIEM platforms like SPLUNK and CHRONICLE for monitoring and incident response.

Highest-signal resume keywords

Security Orchestration, Automation And Response (SOAR)Malware AnalysisThreat HuntingSPLUNK SIEMPython Automation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cyber SecurityIncident ResponseThreat ModelingRoot Cause AnalysisControl Deployment ProcessDiagnostic SkillsAnalytical SkillsTroubleshootingProblem SolvingSelf-Direction

Soft Skills

Effective CommunicationMentoringCollaboration

Tools & Technologies

SPLUNKCHRONICLESIEMSCADAHMIPLCRTUControl ServersFirewallsIDS/IPS

Certifications & Qualifications

ITIL FoundationsCCNACompTIA Security+GCIH

Industry Keywords

Cyber Security SOCInformation TechnologySecurity IncidentControl EnvironmentEmerging ThreatsSecurity LegislationVulnerabilitiesHCE OT IR SOC

Tech Stack

Tools & technologies

Cyber SecurityFirewallsPythonSplunk

About the role

Key responsibilities & impact

Monitors SIEM, trouble tickets / email notifications and in-person escalations, logs from ICS infrastructure components (SCADA, HMI, PLC, RTU, Control Servers), applications or network devices such as switches, firewalls, IDS/IPS;
Design, implement, test Security Orchestration, Automation and Response processes and procedures;
SOAR playbook development and troubleshoot automation capabilities;
Examine the escalated tickets to determine if they are true positive or false positives.
Performs malware analysis, threat hunting and threat modeling activities;
Assist forensic investigation by providing reports and other information;
Reviews and suggests improvements to control deployment process and installation procedures
Develops and documents remediation recommendations for business owners to improve the control environment in which a security incident occurs. Recommendations must be easily understood by non-technical staff;
Provide recommendations and direction on the tuning of signatures, rules, alerts, parsers, and custom scripts within the monitoring solutions;
Participates in root cause analysis and helps with the orchestration of remediation;
Understand defense in depth strategies and apply those to Client’s environment;
Creates and disseminates security related notifications for internal staff (for example: trends, developments, changes in capabilities);
Acts as L2 Escalation layer in the SOC.
Mentors Level 1 SOC Analysts;
Creates manuals, guides and knowledge base entries;
Keep abreast of latest security and privacy legislation, emerging threats, regulations, advisories, alerts, and vulnerabilities pertaining to HCE OT IR SOC and its customers;
Remains knowledgeable of our current solution portfolio and the technical specificities of our offerings.

Requirements

What you’ll need

Bachelor’s degree in a computer related field such as Computer Science, Computer information systems or electronics
Minimum of 3 years’ experience in cyber security SOC industry
Minimum of 5 years’ experience in Information Technology
Strong diagnostic and analytical skills including problem solving, trouble shooting, management of priorities and self-direction to resolve complex issues
Effective written and verbal skill to enable strong communication capabilities
Information Technology certifications: ITIL Foundations
Security Certifications: CCNA, CompTIA Security+, GCIH, or other similar certifications
Experience to automate tasks and integrate systems with Python
Experience with SPLUNK or CHRONICLE SIEM platforms and logging solutions

Benefits

Comp & perks

3 days from office, 2 days from home hybrid work arrangement to support your work-life balance
Competitive Salary regularly increased based on your performance
Enjoy 25 vacation days per year, plus extra days off for life's special events
We provide meal vouchers
Flexible benefits basket with monthly budget allocated (top up medical insurance, life insurance, pension, vacation/ cultural/ fuel vouchers)
Medical Insurance Plan paid by the company
Christmas and Easter bonuses
Recognition & referral bonus programs
Comprehensive induction, ongoing training and development to set you up for success
In-house and external learning platforms (Udemy) to continue to expand your skills
Work experience opportunities to help you grow your career with us
Global employee networks to help you connect and grow
Employee Assistance Program - Free and confidential service to help with any difficulties regarding work, life and personal or family matters
In case of unfortunate events, we support you by offering you free days and financial support (handled on a case by case basis) or Family financial aids
Access Integrity line - Any workplace issues or violations that need to be raised in good faith, can be communicated in a safe, private and confidential environment
Your family is growing while working at Honeywell? We congratulate you by offering special bonuses
Frequent Employee Engagement activities fostering an inclusive and diverse work environment
Fresh fruit days in the office