Cyber Security Engineer I-Penetration Tester

About the Role

Honeywell Technologies - Building Automation (BA) is a global leader for products and technologies that are installed in over 10 million buildings in more than 75 countries. BA software and products address key energy challenges, keep people and places safe, enhance the building occupant experience, and improve critical infrastructure. The business also takes a secure-by-design approach to its product development and ensures that its products are optimized for the people who use them – the building owner, operator, occupant, and installer.

This role will report directly to the Sr. Cyber Security Manager and will be located in Plymouth, MN on a Hybrid work schedule.

The Cyber Security Engineer I reports to the Product Security Assurance Leader and will be responsible for assessing and evaluating the security posture of a variety of Honeywell Products and partner technologies. This role will be responsible for security services delivery, which may include use of application/network/firmware/hardware security toolsets, detection of security defects, and remediation consultation of those weaknesses. Services support the identification of potential attack techniques and serve as the foundation for continuously improving the product development lifecycle.

As a Cyber Security Engineer I, you will be responsible for supporting the design and implementation of cybersecurity solutions. You will work on fortifying defenses against emerging threats and assist in addressing technical challenges. You will collaborate with cross-functional teams, stay informed about emerging technologies, and contribute to a culture of continuous improvement. In this role, you will impact the security and resilience of businesses worldwide by protecting critical assets and information.

Key Responsibilities

• Individual Contributor with Product Security Assurance Team
• Deliver Security Testing across all of BA
• Assist in the development of modular, repeatable, effective Security Testing processes
• Partner with Tools and Technology Team to select, implement, develop, and automate testing with appropriate tools.
• Work with cross-functional teams to develop remediation suggestions
• Report observations using our standardized reporting structure

Requirements & Tech Stack

• Cybersecurity capabilities and strong software engineering skills
• Exposure to security testing within the appropriate domain

Qualifications

• Bachelor’s degree in computer science or software engineering, electrical engineering or equivalent experience
• 6 – 24 months experience in security testing
• Cybersecurity capabilities and strong software engineering skills
• Basic understanding of security by design principles and architecture level security concepts
• Up to date knowledge of current and emerging security threats and techniques for exploiting security vulnerabilities
• Effective oral and written communication skills
• Interpersonal skills
• Experience in security testing within the appropriate domain
• Relevant Security certifications
• Experience and knowledge of penetration testing methodologies and tools
• Public speaking at Technical Conferences

U.S. Person Requirements: Candidate must be a U.S. Person, which is defined as, a U.S. citizen, a U.S. permanent resident, or have protected status in the U.S. under asylum or refugee status OR have the ability to obtain an export authorization.