Product Cyber Security Engineer II

Fort Mill, SC

Full-time

Hybrid

Entry, Mid Level

Honeywell is a global leader in automation and technology solutions, seeking a Product Cyber Security Engineer II to join their Industrial Automation Product Security Team. The role involves providing product security expertise throughout all phases of the software development lifecycle for various products, supporting new product introduction security processes, and mentoring development teams on security best practices.

Apply Now

Responsibilities

Support NPI (New Product Introduction) security process activities including threat modeling, final security reviews, threat vulnerability assessment, etc. for all software and firmware development in IA(SPS)
Audit key process deliverables related to security for correctness and completeness
Drive efforts with the development teams to quantify residual product risk and identification of appropriate security controls
Provide product security related coaching/mentoring and security expertise for all software and firmware development teams in IA(SPS)
Help engineering and Product Management teams identify relevant security requirements
Drive a standardized set of security product requirements into product and service offerings
Lead and coordinate cross-functional activities for incident response

Qualification

Required

Bachelor's degree in computer science, software engineering, cyber security or equivalent
Cyber security capabilities and software engineering skills
Knowledge of secure software development lifecycle and practices such as threat modeling, security reviews, penetration tests, and security incident response
1 to 3 years of software development/Assurance testing with at least 1 year in developing secure systems
Understanding of security by design principles and architecture level security concepts
Up to date knowledge of current and emerging security threats and techniques for exploiting security vulnerabilities

Preferred

Certifications in security and privacy demonstrating deep practical knowledge such as CSSLP or CISSP
Experience and knowledge of penetration testing methodologies and tools
Understanding of Agile software development practices
Excellent communication skills