Sr Advanced Cyber Security Architect​/Engineer - Penetration Testing

Job Description

Senior Advanced Cyber Security Architect/Engineer reports to the Product Security Assurance Leader and will assess and evaluate the security posture of a variety of Honeywell products and partner technologies. The role delivers security services, including the use of application/network/firmware/hardware security tools, detection of security defects, and remediation consultation to strengthen product development.

• Individual contributor with the Product Security Assurance team.
• Provide mentorship, expertise, and direction to junior team members.
• Deliver security testing across all industrial automation products.
• Assist in developing modular, repeatable, effective security testing processes.
• Partner with the Tools and Technology team to select, implement, develop, and automate testing with appropriate tools.
• Work with cross‑functional teams to develop remediation suggestions.
• Report observations using the standardized reporting structure.
• Frequent lifting or moving up to 25 pounds.

• Bachelor’s degree in computer science, software engineering, electrical engineering, or equivalent experience.
• 7+ years of demonstrated experience in penetration testing, or 5+ years of penetration testing with 2+ years of application development.

• Penetration testing across web, mobile, thick client, API, web services, hardware, cloud, and containers.
• Exposure to industrial control system pentesting.
• Understanding of application protocols, development, and common attack vectors.
• Strong software engineering skills and cybersecurity capabilities.
• Excellent understanding of security‑by‑design principles and architecture‑level security concepts.
• Ability to script advanced attacks and fuzz applications and protocols for new vulnerabilities.
• Ability to discover advanced logic flaws and multi‑step architectural errors.
• Experience with penetration testing methodologies and tools.
• Up‑to‑date knowledge of current and emerging security threats.
• Demonstrated project management skills.
• Effective oral and written communication skills.
• Good interpersonal skills.
• Experience in security testing within the appropriate domain.
• Relevant security certifications (e.g., CEH, OSCP, OSWE).
• Public speaking experience at technical conferences.
• Familiarity with reverse engineering tools, debuggers, and dynamic analysis techniques.
• Experience integrating pentest tools into CI/CD pipelines.

EEO statement:
Honeywell is an equal opportunity employer and encourages applicants from diverse backgrounds.