What are the responsibilities and job description for the Advanced Cyber Security Architect- Application Insights position at honeywell2-pilot?
The future is what you make it.
When you join Honeywell, you become a member of our global team of thinkers, innovators, dreamers and doers who make the things that make the future.
That means changing the way we fly, fueling jets in an eco-friendly way, keeping buildings smart and safe and even making it possible to breathe on Mars.
Working at Honeywell isn’t just about developing cool things. That’s why all of our employees enjoy access to dynamic career opportunities across different fields and industries.
Are you ready to help us make the future?
Honeywell Connected Enterprise (HCE) is a global leader for products and technologies that are installed in more than 10 million buildings, aircraft, and facilities worldwide. We are a pioneer in the Internet of Things, developing the next generation of connected offerings.
Are you someone who wants to drive real improvements into real products in an environment which has a strong organizational support for product security?
In the role of the Advanced Cyber Security Architect for Application Insights (a HON AI/ML Platform), you will report to the Product Security Leader and will provide expertise in security to development teams throughout all phases of the SDLC. Working under senior guidance, you will drive one or more products and ensure they're built and deployed securely in the cloud.
Responsibilities:
- For all Forge Application Insights releases, support secure lifecycle process activities including threat modeling, risk assessment, analysis of findings from penetration tests, and tools (e.g., SAST, SCA, Container vulnerability scans)
- Review Analytics Platform product artifacts, identify, assess, and manage vulnerabilities in the AI/ML and Data Ingestion components such as Azure Data Bricks, Dynamo, etc.
- Identify, design, and track risk-remediating security requirements by actively managing open security risks
- Participate in PI planning, sprint planning, & daily standups with development teams to champion security in development backlog
- Understand and advise product teams on enterprise policies and technical standards with specific regard to vulnerability management and secure configuration
- Balance the product requirements and product security to ensure a stable product
