Product Security Lead - Sparta (Remote)

Honeywell; Hamilton (NJ); Remote; USD 60,000 - 80,000; Full time

Job summary

An established industry player is seeking a Cyber Security Architect to join their innovative team. This role involves driving security improvements and mentoring team members while collaborating on best practices for secure product compliance. You'll leverage your expertise in cyber security to influence the development of cutting-edge solutions that align with business needs and technology threats. If you are passionate about security and want to make a significant impact in a dynamic environment, this opportunity is perfect for you.

Qualifications

• Experience in cyber security architecture and risk management.
• Ability to mentor and guide teams on security best practices.

Responsibilities

• Provide architecture mentorship for secure product development.
• Collaborate to establish security compliance best practices.
• Lead secure lifecycle process activities including threat modeling.

Skills

Cyber Security

Risk Assessment

Threat Modeling

Mentorship

Security Architecture

Education

Bachelor's Degree in Computer Science or related field

Relevant Security Certifications (e.g., CISSP, CISM)

Tools

SAST/DAST

SCA

Vulnerability Scans

Job description

Driving Infinite Possibilities Within A Diversified, Global Organization

Honeywell is charging into the Industrial IoT revolution with the establishment of Honeywell Connected Enterprise (HCE), building on our heritage of invention and deep, on-the-ground industry expertise. HCE is the leading industrial disruptor, building and connecting software solutions to streamline and centralize the assets, people and processes that help our customers make smarter, more accurate business decisions. Moving at the speed of software, we are creating, innovating, and delivering solutions fast, challenging the way things have always been done, piloting new ways for all of us to work, and expecting our successes to set new standards for our customers and for Honeywell.

Honeywell Connected Enterprise (HCE) is a global leader for products and technologies that are installed in more than 10 million buildings, aircraft, and facilities worldwide. We are a pioneer on the Internet of Things, developing the next generation of connected offerings. The Security Engineer - Tools & Technology reports to the HCE Product Security Leader and will be responsible for driving hardware selection, configuration, design, and process improvements within our products; and providing mentoring and mentorship to other team members.

The Cyber Security Architect requires business acumen; technical acuity; and the ability to think, communicate and write at various levels of abstraction. Security architects are expected to advocate for security requirements and evaluate new services, vendors, applications, and security tools; drive hardware selection, configuration, design, and process improvements within our products from a technical perspective, and to translate the risk characteristics of these activities and functions into enterprise cyber risk terms.

As a key member of our growing product security team, you'll leverage your proven experience to...

• Provide architecture and standard methodologies' mentorship in building secure Honeywell products.
• Collaborate in broader security community to establish and mature Security & Product Compliance by design best practices, including HCE specific process improvement, HCE security architecture library updates.
• Provide hands-on leadership for secure lifecycle process activities including threat modeling, risk assessment, analysis of findings from penetration tests, and tools (e.g. SAST/DAST, SCA, vulnerability scans), identification and design of risk-remediating security requirements.
• Develop and drive standardized set of security product requirements into HCE product and service offerings.
• Serve as a security expert, helping project teams comply with enterprise security policies, industry regulations, and best practices. Quantify residual product risk and identification of appropriate security controls.
• Support a security architecture process that enables the enterprise to develop and implement security solutions and capabilities that are clearly aligned with business, technology, and threat drivers.