Lead Cyber Sec Archt/Engr

Honeywell is a Fortune 100 company with global sales surpassing $40B and has been one of Fortune’s Most Admired Companies for over a decade. Through innovation the company brings together the physical and digital world to tackle some of the toughest societal and business problems – making the world a more productive, safe and sustainable place.

Honeywell Connected Enterprise (HCE) is a global leader for products and technologies that are installed in more than 10 million buildings, aircraft, and facilities worldwide. We are a pioneer in the Internet of Things, developing the next generation of connected offerings. The Lead Security Architect reports to the HCE Product Security Leader and will be responsible to drive secure SDLC practices, security initiatives to help shift-left & reduce risk, cloud security architecture, design, & configuration of our products.

Are you a cyber professional who desires to make a difference in the everyday security of people? Are you tired of being a consultant to engineering teams that ignore your inputs? Are you someone who wants to drive real improvements into real products in an environment which has a strong organizational support for product security?

The Lead Security Architect will provide product expertise in security to development teams throughout all phases of the SDLC:

• Support secure lifecycle process activities for SaaS Offerings, including security requirements, threat modeling, risk assessment, analysis of findings from penetration tests, and tools
• Proactive collaboration with broader security teams to establish and mature security by design / default best practices, including process improvement, as well as expanding and updating security architecture and standardized requirements
• Provide product security related mentoring and security expertise to all teams in HCE
• Partner with Product Security Leader/Architect to drive cloud application security principles based on Zero Trust Cloud Security Strategy
• Understand HCE’s Cyber products and how the customers use those products to ensure that products are built with security by design and by default
• Assess current cloud state, identify gaps from the Zero Trust state and develop a roadmap in close partnership with CTOs, DevOps to incrementally bring cloud to strategic standards
• Be a technical & hands-on leader to be a coach to Security Advocates, DevOps Architects and Software Architects to grow their cloud security skills

WE VALUE

• Product architecture and development background
• Software engineering or development experience
• Secure software development lifecycle experience
• Familiarity with security regulations and standards
• Understanding of security by design principles and architecture level security concepts
• Understanding of OT and Zero Trust Architecture principles
• Up to date knowledge of current and emerging security threats and techniques for exploiting security vulnerabilities
• Certifications in security such as AWS Certified Security Architect
• Strong interpersonal skills with the ability to facilitate diverse groups, help negotiate priorities, and resolve conflicts
• 15+ years in software development or product security experience with 5+ years in developing or securing cloud products