Innovate to solve the world's most important challenges
Honeywell is a Fortune 100 company with global sales surpassing $40B and has been one of Fortune’s Most Admired Companies for over a decade. Through innovation the company brings together the physical and digital world to tackle some of the toughest societal and business problems – making the world a more productive, safe and sustainable place. Honeywell is organized into five primary groups: Aerospace Technologies; Building Automation; Industrial Automation; Energy and Sustainability Solutions; and the Connected Enterprise.
Honeywell Connected Enterprise (HCE) pioneered Honeywell Forge – an integrated, cross-industry IOT platform to digitalize business outcomes for people, process & assets and is developing the next generation of connected offerings. The Senior Security Architect reports to the HCE Product Security Leader and will be responsible to drive Secure SDLC practices, Cloud Security Architecture, Design & Configuration and Process Improvements within our products.
Are you a cyber professional who desires to make a difference in the everyday security of people? Are you tired of being a consultant to engineering teams that ignore your inputs? Are you someone who wants to drive real improvements into real products in an environment which has a strong organizational support for product security?
The Advanced Cybersecurity Architect will provide product expertise in security to development teams throughout all phases of the SDLC:
- Support secure lifecycle process activities for cloud offerings, including security requirements, threat modeling, risk assessment, analysis of findings from penetration tests, and tools
- Partner with Product Security Leader/Architect to drive cloud application security principles based on Zero Trust Cloud Security Strategy
- Proactive collaboration with broader security teams to establish and mature security by design / default best practices, including process improvement, as well as expanding and updating security architecture and standardized requirements
- Provide product security related mentoring and security expertise to all teams in HCE
- Be a technical guide to Security Advocates, DevOps Architects and Software Architects to grow their cloud security skills
WE VALUE
- Product architecture and development background
- Software engineering or development experience
- Secure software development lifecycle experience
- Familiarity of security regulations and standards
- Understanding of secure by design principles, architecture level security concepts and zero trust principles
- Up to date knowledge of current and emerging security threats and techniques for exploiting security vulnerabilities
- Certifications in security such as Azure/GCP Certified Security Architect
- Strong interpersonal skills with the ability to facilitate diverse groups, help negotiate priorities, and resolve conflicts
- 5+ years in software development or product security experience with 2+ years in developing or securing cloud products
Skills Required
- 5+ years in software development or product security experience with 2+ years developing or securing cloud products
- Product architecture and development background
- Software engineering or development experience
- Secure software development lifecycle (SDLC) experience
- Familiarity with security regulations and standards
- Understanding of secure-by-design principles, architecture-level security concepts, and Zero Trust principles
- Up-to-date knowledge of current and emerging security threats and exploitation techniques
- Certifications in security such as Azure or GCP Certified Security Architect
- Strong interpersonal skills with ability to facilitate diverse groups, negotiate priorities, and resolve conflicts
- Experience mentoring or guiding Security Advocates, DevOps Architects, and Software Architects on cloud security
