Job Description

Deliver business value through Right and Fast partnership Honeywell is a Fortune 100 company with global sales surpassing $40B and has been one of Fortune\'s Most Admired Companies for over a decade. Through innovation the company brings together the physical and digital world to tackle some of the toughest societal and business problems - making the world a more productive, safe and sustainable place. The business is organized into five primary groups: Aerospace Building Technologies Performance Materials and Technologies Safety and Productivity Solutions and the Connected Enterprise. Honeywell Connected Enterprise (HCE) is a global leader for products and technologies that are installed in more than 10 million buildings, aircraft, and facilities worldwide. We are a pioneer in the Internet of Things, developing the next generation of connected offerings. The Lead Security Architect reports to the HCE Product Security Leader and will be responsible to drive Secure SDLC practices, cloud security architecture, design, & configuration and process improvements within our products and provide mentorship to team members. KEY RESPONSIBILITIES: Perform secure lifecycle process activities for SaaS Offerings, including security requirements, threat modeling, risk assessment, analysis of findings from vulnerability assessments & penetration tests, and tools to prioritize security work in development and operations team backlog Drive key security initiatives (Zero Trust) across HCE Proactively collaborate with broader security teams to establish and mature security by design / default best practices Understand HCE\'s products and how the customers use those products to ensure that products are built with security by design and by default Partner with engineering and operations teams to drive security by design / default and alignment to security policies & standards. Influence Product Management to drive down cyber security risk in a measurable way Be a coach to Security Architect and Advocates to grow their product security skills You Must Have: Minimum 12 years in software development or product security experience Cloud security certifications - Azure / AWS We Value: Bachelor\'s degree in Engineering or master\'s in computer applications Software engineering or development experience Secure software development lifecycle experience Understanding of Agile software development practices Experience with DevSecOps (CI/CD) Understanding of security by design principles and architecture level security concepts Up to date knowledge of current and emerging security threats and techniques for exploiting security vulnerabilities Strong interpersonal skills with the ability to facilitate diverse groups, help negotiate priorities, and resolve conflicts

foundit