Job Description
The Advanced Cyber Security Engineer reports to the Product Security Assurance Leader and will be responsible for assessing and evaluating the security posture of a variety of Honeywell IA Products and partner technologies. This role will be responsible for security services delivery, which may include use of web/application/network/Mobile/Cloud/AI ML/protocol/hardware/firmware security toolsets, detection of security defects, and remediation consultation of those weaknesses. Our services support the identification of potential attack techniques and serve as the foundation for continuously improving the product development lifecycle.
Responsibilities
- Individual Contributor with Product Security Assurance Team
- Deliver Security Testing across all IA products.
- Report observations using our standardized reporting structure
- Work with cross functional teams to develop remediation suggestions
- Develop methodologies, determine scoping requirements
- Assist in the development of modular, repeatable, effective Security Testing processes
- Proactively anticipate escalations
- Oversee and ensure client deliverables are on time, requirements are met
- Partner with Tools and Technology Team to select, implement, develop, and automate testing with appropriate tools.
- Assist with onboarding internal team training
- Champion strategic Product Security initiatives
Qualifications
- Bachelor’s degree in computer science or software engineering, electrical engineering or equivalent experience
- 5+ years of Cyber Security or Information Technology experience
Preferred Qualifications
- 5+ years of pentesting experience preferably in – Web, Mobile, Network, Thick Client, API, Web services, Cloud, Containers, AI ML, Embedded security ( Hardware and Firmware) , Protocol fuzzing
- Has a Bachelor’s Engineering degree or equivalent, preferably in Computer Science
- Perform penetration tests (Manual & Automated) for products spanning Web, Mobile (Android and iOS), Cloud, Dockers, Containers and Thick Clients
- Familiarity with reverse engineering tools, debuggers, and dynamic analysis techniques
- Analyze pen test results to identify the security vulnerabilities and suggest countermeasures for threat mitigation
- Good understanding of Secure Development Lifecycle processes
- Good knowledge of OWASP Top 10 and SANS Top 25 and how to effectively remediate vulnerabilities associated with each
- Knowledge of attack frameworks like MITRE, VASTO, CIS Benchmarks, Virtualization Assessment Toolkit to exploit virtualization systems
- Demonstrated manual product penetration testing experience; for example, simulate a SQL injection attack without using tools, simulate XSS attack, X-Path Injection, etc.
- Good knowledge and hands-on experience using various penetration testing tools and frameworks like Nessus, Web Inspect, Nmap, Burp Suite, AppScan, ZAP, Kali Linux tools, IDA Pro, GHidra, OWASP, Metasploit, Nessus, Nmap, MObSF, Genymotion, Frida, APK Tool
- Encryption tools and techniques for securing mobile and virtual machines
- Understanding of application protocols, development, and common attack vectors.
- Good cybersecurity capabilities and strong software engineering skills
- Scripting experience in Python, Powershell and Bash preferred.
- Experience working with other languages such as C, C++, Java, .NET or javascript.
- Up to date knowledge of current and emerging security threats and techniques for exploiting security vulnerabilities
- Effective oral and written communication and negotiation skills
- Good interpersonal skills
- Ability to work with geographically distributed, cross-functional teams
Good to Have Skills
- Certification such as CEH, OSCP, OSWE, CCSP, CCSK, GPEN, CRTP, CRTO will be highly desirable
- Strong Secure SDLC concepts
- Experience in integrating pentest tools to CI/CD pipeline
Employer Description
Honeywell helps organizations solve the world's most complex challenges in automation, the future of aviation and energy transition. As a trusted partner, we provide actionable solutions and innovation through our Aerospace Technologies, Building Automation, Energy and Sustainability Solutions, and Industrial Automation business segments – powered by our Honeywell Forge software – that help make the world smarter, safer and more sustainable.
About UsHoneywell Technologies is a global, pure-play automation company with a legacy of innovating to help solve the world’s most mission-critical challenges, enhancing the quality of life for people and communities around the world. We serve the building, industrial and process sectors with a broad portfolio of services, solutions and products, underpinned by our Honeywell Technologies Accelerator operating system and Honeywell Technologies Forge intelligence layer. By combining the deep domain expertise of our more than 50,000 employees with decades of data from our global installed base, we are uniquely positioned to lead the industrial sector’s transition from automation to autonomy.Skills Required
- Bachelor's degree in computer science, software engineering, electrical engineering, or equivalent experience
- At least 5 years of cybersecurity or information technology experience
- At least 5 years of penetration testing experience
- Experience conducting penetration tests across web, mobile, cloud, container, and thick-client products
- Familiarity with reverse engineering tools, debuggers, and dynamic analysis techniques
- Knowledge of secure development lifecycle processes
- Knowledge of OWASP Top 10 and SANS Top 25 vulnerability remediation
- Knowledge of attack frameworks, CIS Benchmarks, and virtualization assessment tools
- Manual product penetration testing experience
- Hands-on experience with penetration testing tools and frameworks
- Experience with encryption tools and techniques for mobile and virtual machines
- Understanding of application protocols, software development, and common attack vectors
- Strong cybersecurity and software engineering capabilities
- Scripting experience in Python, PowerShell, and Bash
- Experience with C, C++, Java, .NET, or JavaScript
- Current knowledge of emerging security threats and vulnerability exploitation techniques
- Effective oral, written communication, negotiation, and interpersonal skills
- Ability to work with geographically distributed, cross-functional teams
- Cybersecurity certification such as CEH, OSCP, OSWE, CCSP, CCSK, GPEN, CRTP, or CRTO
- Experience integrating penetration testing tools into CI/CD pipelines
Honeywell Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Honeywell and has not been reviewed or approved by Honeywell.
-
Retirement Support — Retirement benefits are anchored by a strong 401(k) match with clear vesting and annual funding mechanics. Plan administration and education resources further reinforce long‑term savings support.
-
Leave & Time Off Breadth — Time away provisions include company holidays, flexible vacation for many exempt roles, and paid sick time. These policies contribute meaningful breadth beyond base pay.
-
Parental & Family Support — Paid parental leave is available to all parents with flexible usage options, and certain family‑building supports are included. Birth mothers can coordinate leave with short‑term disability for extended coverage.
Honeywell Insights
What We Do
Honeywell is a Fortune 500 company that invents and manufactures technologies to address tough challenges linked to global macrotrends such as safety, security, and energy. With approximately 110,000 employees worldwide, including more than 19,000 engineers and scientists, we have an unrelenting focus on quality, delivery, value, and technology in everything we make and do.
