Principal Incident Response Analyst

Job not on LinkedIn

🔥 5 minutes ago

🌵 Arizona – Remote

🌵 Arizona – Remote

💵 $164k - $236k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🚨 Incident Response Analyst

👻 Ghost score 1%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Honeywell Aerospace Technologies

WebsiteLinkedInAll Job Openings

10,000+ employees

🚀 Aerospace

🎖️ Defense

🔧 Hardware

Aerospace • Defense • Hardware

Honeywell Aerospace Technologies is Honeywell's aerospace business unit that designs, manufactures, and supports avionics, navigation and sensor systems, engines and auxiliary power units, electric power and propulsion systems, cabin and cockpit systems, RF and electromagnetic defense components, space electronics and microelectronics, and maintenance/repair and service solutions for commercial, business, general aviation, military and space platforms.

📋 Description

• Conduct detailed cybersecurity data analysis and provide insights • Perform Digital Forensics and Incident Response (DFIR) as an Incident Commander • Lead complex cybersecurity incidents through successful conclusion • Conduct incident triage to identify threats and vulnerabilities • Ensure effective security measures protect critical assets and information • Mentor junior cybersecurity analysts • Build and maintain processes and procedures • Collaborate with global team members • Lead large-scale technical projects • Develop Root Cause and Corrective Action Reports • Participate in a global on-call rotation • Perform threat hunting • Report directly to the Sr. Director of Cyber Security

🎯 Requirements

• U.S. Person requirement: U.S. citizen, U.S. permanent resident, protected status in the U.S. under asylum or refugee status, or ability to obtain an export authorization • At least 5 years of incident commanding / response experience • At least 5 years in one or more of: network and host forensics, Windows/Linux/macOS operating systems, automation using Python/Shell/PowerShell, log analysis, malware analysis, presentations to executive leadership, or technical training/mentoring • At least 3 years of technical experience • At least 2 years of professional experience presenting to executive leadership or providing technical training/mentoring • Bachelor's Degree • Experience with SIEM, SOAR, and EDR solutions • Experience with cloud and container security, including Azure, AWS, O365, Docker, and Kubernetes • Experience with reverse engineering malware • Strong critical thinking and problem-solving skills

🏖️ Benefits

• Employer-subsidized medical, dental, vision and life insurance • Short-term and long-term disability coverage • 401(k) match • Flexible spending accounts and health savings accounts • Employee assistance program and educational assistance • Parental leave • 12 paid holidays • Paid time off for vacation, personal and sick time

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume