[Hiring] Cybersecurity Analyst I @Honeywell Aerospace

Role Description

The Cybersecurity Analyst I (Tier 1 SOC Analyst) is responsible for monitoring, triaging, and responding to security alerts across enterprise environments. This role serves as the first line of defense within the SOC, supporting incident detection, initial investigation, and escalation while maintaining high-quality documentation and response standards.

The analyst will work with SIEM, EDR, and cloud security tools to identify potential threats, reduce false positives, and support the organization’s overall cybersecurity posture.

Key Responsibilities

• Monitor security alerts using tools such as Microsoft Sentinel, Splunk, and Microsoft Defender for Endpoint
• Perform initial triage and analysis of alerts (phishing, malware, suspicious login activity, endpoint detections)
• Investigate alerts using endpoint, network, and cloud logs
• Escalate confirmed or complex incidents to Tier 2/3 teams
• Create and update incident tickets in ServiceNow or similar platforms
• Follow incident response procedures aligned with NIST SP 800-61
• Document findings, actions taken, and outcomes clearly and accurately
• Support detection tuning by identifying false positives and recurring alert patterns
• Participate in shift handoffs and maintain situational awareness of ongoing incidents

Company Description