What are the responsibilities and job description for the Lead Cyber Security Architect position at honeywell2-pilot?
Innovate to solve the world's most important challenges
The future is what you make it.
When you join Honeywell, you become a member of our global team of thinkers, innovators, dreamers and doers who make the things that make the future.
That means changing the way we fly, fueling jets in an eco-friendly way, keeping buildings smart and safe and even making it possible to breathe on Mars.
Working at Honeywell isn’t just about developing cool things. That’s why all of our employees enjoy access to dynamic career opportunities across different fields and industries.
Are you ready to help us make the future?
Honeywell Connected Enterprise (HCE) is a global leader for products and technologies that are installed in more than 10 million buildings, aircraft, and facilities worldwide. We are a pioneer in the Internet of Things, developing the next generation of connected offerings.
Are you someone who wants to drive real improvements into real products in an environment which has a strong organizational support for product security?
In the role of Lead Cyber Security Architect for Forge Core Services and Aero Defense, you will join a growing Product Security team providing expertise in security requirements and architecture to engineering teams throughout all phases of the product lifecycle. The Lead Cyber Security Architect will report to the Product Security Leader and will drive security baselines, processes, solutions, and risk reduction across a growing line of core product areas; providing mentorship to team members.
Responsibilities:
- Partner with Cloud Security Architecture to drive the security strategy and provide input into cloud security patterns to build Zero Trust architecture
- Work closely with DevOps to ensure the Cloud is built securely using IaC and manage cloud security posture management via enforcing policies in Defender for Cloud
- As a member of the architecture leadership team, you will understand and influence the development of Forge Core Services and Aero Defense offerings by ensuring security by design of the cloud, as well as on-premises solutions.
- Ensure data privacy and data security requirements are understood and implemented in accordance with applicable country laws and regulations
- Partner with development teams across product lines to drive security requirements, practices, and complete thorough security reviews of products
- Drive secure engagement and architecture including threat modeling, vulnerability and risk assessment, analysis of findings from penetration tests, and tools (e.g., SAST, SCA, Container vulnerability scans)
- Drive incident response investigation, ensure coordination for remediation plan and execution
- Partner with engineering and SRE’s to implement processes, policies, and controls for reducing product security risk
- Scope and drive AIST testing of products, perform results assessments, and assist in remediation strategies with engineering
- Mentor and coach engineering and security architects in secure SDLC practices, train and engage security advocates
