Product Security Leader – Shared Services

Key Responsibilities

• Develop and drive programs to operationalize and automate the Honeywell product security vision across all Aerospace SBUs with an emphasis on gaining measurable results.
• Deliver a range of security automation solutions that are integrated into Honeywell’s Security Development Lifecycle.
• Possess demonstrated expertise in SDLC governance, supply chain security, knowledge of security/assurance tools, and development of Cybersecurity training programs for engineering/technical professionals.
• Develop and maintain a program that informs Aero leadership and functional group leadership of the top security risks and overall security health of their programs and teams.
• Develop and drive approaches to identify and prevent security vulnerabilities earlier in the development process in an automated scalable manner and work with engineering to deploy and utilize these approaches.
• Build a strong security community across the company’s functional, business and technology organizations.
• Steward Cybersecurity best practices and strategic priorities in alignment with Aero industry needs to drive excellence in both thought leadership and execution.

Qualification & Requirements

YOU MUST HAVE

• 15+ years of overall professional experience with 10+ years in Cyber security
• 5+ years of management experience
• Demonstrated knowledge of the various security assurance activities in a Secure Software Development Lifecycle, history of applying that information across a variety of software delivery methodologies, and proven expertise in leading a team of security technical team and researchers

WE VALUE

• Bachelor’s degree in Computer Science, Electrical Engineering, Aerospace Engineering, Information Systems, or similar degree
• Knowledge of Commercial and Aerospace Defense industry and application regulatory standards
• Strong communications skills with all levels of an organization, including executive and front-line employees
• Willingness to work a problem to completion in a fast-paced environment
• Expertise and thought leadership across all aspects of SSDLC
• Ability to perform and mentor team members in all security assurance activities in the SSDLC from concept through to release including architecture and design reviews, threat modelling, use of appropriate tools and code reviews
• Deep understanding of security vulnerabilities, their mitigations, and ability to communicate details appropriate to audience levels
• Deep understanding of development methodologies, developer tools and processes
• Demonstrated experience dealing with security challenges and issues confronting a large, geographically distributed, departmentally diverse, global, public-facing organization
• Proven success delivering large, complex projects and programs
• CISSP, CSSLP, CISM, CISA or other related credentials

Benefits

• Insurance Benefits
• Retirement Benefits
• Vacation Policy
• Other Perks and Benefits…