About this role
We’re looking for someone who sees what others miss.
An inquisitive and highly analytical Insider Risk Analyst - Cyber Security who doesn’t just follow patterns—but questions them. Someone who is naturally curious about human behavior, data anomalies, and the subtle signals that indicate when something isn’t quite right.
In this role, you’ll join our Insider Risk Unit, where you’ll help protect the organization from risks that originate within. You’ll work at the intersection of security, technology, and human behavior—monitoring user activity, analyzing access patterns, and investigating anomalies that could impact our intellectual property and critical assets.
But this isn’t just about detection. You’ll collaborate closely with teams across the business—including Human Resources, Legal, and IT—to ensure investigations are handled thoughtfully, ethically, and in line with company standards. Your work will directly influence how security is embedded into our operations and technology platforms.
You’ll report directly to our Insider Risk Manager on a hybrid work schedule.
KEY RESPONSIBILITIES
• Monitor & Triage: Continuously monitor security telemetry using SIEM, DLP (Data Loss Prevention), and UEBA (User and Entity Behavior Analytics) tools to identify high-risk, anomalous behavior. • Investigate: Conduct detailed investigations into potential insider threats, including intellectual property theft, data exfiltration, credential misuse, and policy violations. • Collaborate: Partner cross-functionally with HR, Legal, Compliance, and Physical Security teams to resolve incidents while respecting employee privacy. • Report & Present: Document investigative findings and work with investigators to provide clear reports for key stakeholders and senior management. • Threat Hunting: Proactively analyze data pipelines and detection logic to enhance early identification of internal risks and develop new detection use cases.
YOU MUST HAVE
• Bachelor’s degree from an accredited institution in technical discipline such as science, technology, engineering, mathematics, or equivalent experience • 3 - 5 years of progressive experience in Information Security, Insider Threat Operations, Cybersecurity Engineering or Architecture roles. • Working knowledge of User Activity Monitoring (UAM), DLP, and SIEM platforms (e.g., Splunk, Microsoft Purview/Sentinel). Expertise in cloud security architectures (Azure, AWS), secure development lifecycle, cryptography, and incident response. • Strong ability to connect seemingly unrelated events, identify behavioral indicators, and apply critical thinking to complex, ambiguous scenarios. • Proficiency with security tools and technologies including a working knowledge of Splunk. • Excellent judgment and the ability to handle highly sensitive, confidential information with professionalism and tact. WE VALUE
• Advanced degrees in Cybersecurity, Computer Science, Electrical Engineering, or related fields. • Relevant certifications such as CISSP, CISM, GIAC, or equivalent. • Ability to review Threat Intelligence documents and be able to synthesize Threat Actor behaviors, align them to MITRE ATT&CK, and craft working queries to identity these behaviors in a large corporate environment. • Strong analytical skills, problem-solving abilities, and a proactive approach to emerging security challenges. • Ability to leverage scripting languages (Python, PowerShell) to automate tasks and manipulate data. WE OFFER
• Enjoy 25 vacation days per year • Meal allowance • Benefit Plus Cafeteria Card available to all employees • Recondition days (sick days) • To promote health and wellbeing we provide life insurance coverage, employer contribution to Pension saving scheme or long-term investment product (DIP) • Multisport Card, Makro Card, discount at T-Mobile tariffs and multiple discount programs in our partner network • 3 plus 2 hybrid work arrangement to support your work-life balance • Flexible working hours • Work in international environment • Recognition and Referral bonus programs • Employee Assistance Program - Free and confidential service to help with any difficulties regarding work, life and personal or family matters • Honeywell Learning and Development Center – learning platform with over 10,000 courses from Udemy • Frequent Employee Engagement activities fostering an inclusive and diverse work environment • Global employee networks to help you connect and grow • Comprehensive induction, ongoing training, and development to set you up for success, in-house and external learning platforms supporting development opportunities Join Honeywell - A Global Leader in Innovation! We are an equal opportunity employer and value diversity at our company. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform crucial job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.
At Honeywell, we are proud to be an international employer with a robust presence in over 70 countries. Our diverse workforce fosters innovation through collaboration and inclusiveness.
We are seeking dynamic individuals who thrive in fast-paced environments to join our team. Here, you’ll have the opportunity to work alongside talented professionals from around the world, contributing to exciting projects and pioneering solutions that impact industries globally.
At Honeywell, your career can soar with access to global resources and continuous development programs. If you are ready to take your professional journey to the next level, explore our opportunities today! #AERO26