Advanced Cyber Sec Archt/Engr
Job Description
Driving Infinite Possibilities Within A Diversified, Global Organization
Innovate to solve the world's most important challengesThe future is what you make it.When you join Honeywell, you become a member of our global team of thinkers, innovators, dreamers, and doers who make the things that make the future.That means changing the way we fly, fueling jets in an eco-friendly way, keeping buildings smart and safe and even making it possible to breathe on Mars.Working at Honeywell isn't just about developing cool things. That's why all our employees enjoy access to dynamic career opportunities across different fields and industries. Are you ready to help us make the future
The Honeywell Global Security (HGS) business believes in integrating security into all aspects of our business to protect the people, processes, and assets by which Honeywell achieves its greater mission.
In the role of Sr Advanced Cyber Security Architect, you will join a growing central Product Security organization providing expertise in secure software, requirements, and architecture throughout all phases of the product lifecycle.The role will report to the Director of Cyber Security and will drive security baselines, processes, solutions, and risk reduction across a growing line of core product.
This role will have the unique distinction of being a part of a highly cross functional security team, creating new strategies, policies and processes, and centrally touching every end of Honeywell's offerings, product lifecycle, and business lifecycle.This role will additionally interact regularly with Suppliers and industry partners, to keep up with an ever-evolving threat landscape.
Key Responsibilities:
- Lead efforts with the development teams to manage product risk and apply the appropriate security controls
- Provide product security related coaching and security expertise for all software and firmware development teams
- Drive best in class security requirements into product and service offerings
- Lead and coordinate cross-functional activities for Supplier Cyber Assessments
- Lead new project deployments and initiatives that add value to SDL processes and procedures
- Lead efforts of mentoring and training the engineering development community and facilitate adoption of shift-security-to-left practice
- As a member of the architecture leadership team, you will understand and influence the development of services and offerings by ensuring security by design of the cloud, as well as on-premises solutions.
- Ensure data security requirements are understood and implemented in accordance with applicable country laws and regulations
- Partner with development teams and Suppliers across business and product lines to drive security requirements, practices, and complete thorough security reviews of products
- Drive secure engagement and architecture including threat modeling, vulnerability and risk assessment, analysis of findings from penetration tests, and tools (e.g., SAST, SCA, Container vulnerability scans)
- Drive incident response investigation, ensure coordination for remediation plan and execution
- Mentor and coach engineering and security architects in secure SDLC practices, train and engage security advocates
- Represent Honeywell in consortia, contributing to creation and refinement of tomorrow's industry standards and best practices
You must have:
- 6+ years of experience in security engineering
- Secure software development lifecycle (SSDLC) experience
- Understanding of security by design principles
We value:
- Experience with Cloud Provider (e.g., Azure, AWS, GCP) security architecture and controls
- Experience with Threat Modeling
- Experience with security tools (e.g., SAST, SCA, vulnerability scanning, penetration testing)
- Understanding of Agile software development practices
- Experience with SaaS, cloud, IOT, and OT security and controls
- Understanding of DevOps (CI/CD)
- Sound understanding of Cryptography, encryption algorithms, Public Key Infrastructure (PKI), Secure boot and Open-source risk management
- Up to date knowledge of current and emerging security threats and techniques for exploiting security weaknesses
- Certifications in security demonstrating deep practical knowledge such as CSSLP, CCSP, or CISSP
- Strong interpersonal skills with the ability to facilitate diverse groups, help negotiate priorities, and resolve conflicts among partners
- Experience working with external partners
- Experience with definition, creation, integration, and monitoring of metrics
- Passion for achieving results and continual self-improvement
- Master's Degree