Advanced Cyber Security Engineer

Advanced Cyber Security Engineer

Honeywell Building Technologies is a global leader for products and technologies that are installed in over 10 million buildings in more than 75 countries. HBT software and products address key energy challenges, keep people and places safe, enhance the building occupant experience, and improve critical infrastructure. The business also takes a secure-by-design approach to its product development and ensures that its products are optimized for the people who use them – the building owner, operator, occupant, and installer.

The Advanced Cyber Security Engineer reports to the Product Security Assurance Leader and will be responsible for assessing and evaluating the security posture of a variety of Honeywell Products and partner technologies.  This role will be responsible for security services delivery, which may include use of application/network/firmware/hardware security toolsets, detection of security defects, and remediation consultation of those weaknesses.  Our services support the identification of potential attack techniques and serve as the foundation for continuously improving the product development lifecycle.

Responsibilities

• Individual Contributor with Product Security Assurance Team, with minor team leadership accountabilities

• Provide mentorship, expertise and direction to junior team members

• Assist with onboarding internal team training

• Champion strategic Product Security initiatives

• Oversee and ensure client deliverables are on time, requirements are met

• Proactively anticipate escalations 

• Lead initiatives to engineer better solutions

• Develop methodologies, determine scoping requirements

• Deliver Security Testing across all of HBT 

• Assist in the development of modular, repeatable, effective Security Testing processes 

• Partner with Tools and Technology Team to select, implement, develop, and automate testing with appropriate tools.

• Work with cross functional teams to develop remediation suggestions

• Report observations using our standardized reporting structure

• The engineer may frequently lift and/or move up to 25 pounds

Basic Qualifications

• Bachelor’s degree in computer science or software engineering, electrical engineering or equivalent experience

• Total Experience – Minimum 5 years

• 3+ years demonstrated experience in penetration testing

• 1+ years project management skills

Preferred Qualifications

• Experience in pentesting – Web, Mobile App, Thick Client, API, Web services, Hardware, Cloud, Containers

• Exposure to IoT pentesting

• Understanding of application protocols, development, and common attack vectors. 

• Good cybersecurity capabilities and strong software engineering skills

• Excellent understanding of security by design principles and architecture level security concepts 

• Experience and knowledge of penetration testing methodologies and tools

• Up to date knowledge of current and emerging security threats and techniques for exploiting security vulnerabilities

• Effective oral and written communication skills

• Good interpersonal skills 

• Experience in security testing within the appropriate domain

• Relevant Security certifications

• Public speaking at Technical Conferences 

• Familiarity with reverse engineering tools, debuggers, and dynamic analysis techniques

• Experience in integrating pentest tools to CI/CD pipeline