Advanced Cyber Sec Archt/Engr
Honeywell · Posted Nov 5
Building automation, industrial automation, aerospace, and energy-efficient technology solutions
Get a personal compatibility score
Add a resume for personal matches
About the role
Honeywell's Product Security Assurance team assesses and evaluates the security posture of a variety of Honeywell IA products and partner technologies. The work spans web, application, network, mobile, cloud, AI/ML, protocol, hardware and firmware security tooling, identifying potential attack techniques and supporting continuous improvement of the product development lifecycle. This role delivers security testing and services, reports findings, and works with cross-functional teams on remediation and repeatable security testing processes.
What you will do
- Individual Contributor with Product Security Assurance Team
- Deliver Security Testing across all IA products.
- Report observations using our standardized reporting structure
- Work with cross functional teams to develop remediation suggestions
- Develop methodologies, determine scoping requirements
- Assist in the development of modular, repeatable, effective Security Testing processes
- Proactively anticipate escalations
- Oversee and ensure client deliverables are on time, requirements are met
- Partner with Tools and Technology Team to select, implement, develop, and automate testing with appropriate tools.
- Assist with onboarding internal team training
- Champion strategic Product Security initiatives
Skills used in this role
What the employer is looking for
- Bachelor’s degree in computer science or software engineering, electrical engineering or equivalent experience
- 5+ years of Cyber Security or Information Technology experience
Preferred qualifications
- 5+ years of pentesting experience preferably in – Web, Mobile, Network, Thick Client, API, Web services, Cloud, Containers, AI ML, Embedded security ( Hardware and Firmware) , Protocol fuzzing
- Has a Bachelor’s Engineering degree or equivalent, preferably in Computer Science
- Perform penetration tests (Manual & Automated) for products spanning Web, Mobile (Android and iOS), Cloud, Dockers, Containers and Thick Clients
- Familiarity with reverse engineering tools, debuggers, and dynamic analysis techniques
- Analyze pen test results to identify the security vulnerabilities and suggest countermeasures for threat mitigation
- Good understanding of Secure Development Lifecycle processes
- Good knowledge of OWASP Top 10 and SANS Top 25 and how to effectively remediate vulnerabilities associated with each
- Knowledge of attack frameworks like MITRE, VASTO, CIS Benchmarks, Virtualization Assessment Toolkit to exploit virtualization systems
- Demonstrated manual product penetration testing experience; for example, simulate a SQL injection attack without using tools, simulate XSS attack, X-Path Injection, etc.
- Good knowledge and hands-on experience using various penetration testing tools and frameworks like Nessus, Web Inspect, Nmap, Burp Suite, AppScan, ZAP, Kali Linux tools, IDA Pro, GHidra, OWASP, Metasploit, Nessus, Nmap, MObSF, Genymotion, Frida, APK Tool
- Encryption tools and techniques for securing mobile and virtual machines
- Understanding of application protocols, development, and common attack vectors.
- Good cybersecurity capabilities and strong software engineering skills
- Scripting experience in Python, Powershell and Bash preferred.
- Experience working with other languages such as C, C++, Java, .NET or javascript.
- Up to date knowledge of current and emerging security threats and techniques for exploiting security vulnerabilities
- Effective oral and written communication and negotiation skills
- Good interpersonal skills
- Ability to work with geographically distributed, cross-functional teams
- Certification such as CEH, OSCP, OSWE, CCSP, CCSK, GPEN, CRTP, CRTO will be highly desirable
- Strong Secure SDLC concepts
- Experience in integrating pentest tools to CI/CD pipeline
Benefits and support
- Compensation and benefits are detailed in the job posting
About Honeywell
Honeywell is a multinational conglomerate corporation that invents and manufactures technologies addressing tough challenges linked to global macrotrends such as safety, security, and energy. It operates major business divisions focusing on building automation, industrial automation, and enterprise performance solutions. Through continuous innovation, the company helps drive smarter, safer, and more sustainable operations worldwide.
- Industry
- Conglomerate
- Company size
- 101000+ employees
- Founded
- 1906
- Location
- Charlotte, North Carolina, USA
- Funding stage
- Public Company
Leadership
Chairman and Chief Executive Officer
Mike Stepniak
Senior Vice President and Chief Financial Officer
Suresh Venkatarayalu
Senior Vice President and Chief Technology Officer
Recent coverage
Business Wire
Honeywell Reports Third Quarter Results, Raises Full-Year 2026 Outlook2026-10-22
Manufacturing Dive
Honeywell Technologies raises 2026 outlook due to data center, AI demand2026-10-22
GuruFocus
Honeywell Aerospace Q3 2026 Earnings Call Highlights: Backlog Tops $19 Billion as Orders Surge2026-11-02