Evaluate and test Honeywell products for security vulnerabilities across hardware, firmware, applications, networks, mobile and cloud. Deliver and automate security testing, partner with tools teams, report findings, and provide remediation guidance. Contribute to repeatable testing processes and work with cross-functional teams to improve product security.
Qualifications
Cyber Security Engineer II
The Cyber Security Engineer II reports to the Product Security Assurance Leader and will be responsible for assessing and evaluating the security posture of a variety of Honeywell Products and partner technologies. This role will be responsible for security services delivery, which may include use of hardware/firmware/application/network/Mobile/Cloud security toolsets, detection of security defects, and remediation consultation of those weaknesses. Our services support the identification of potential attack techniques and serve as the foundation for continuously improving the product development lifecycle.
Responsibilities
- Individual Contributor with Product Security Assurance Team
- Deliver Security Testing Honeywell Products
- Assist in the development of modular, repeatable, effective Security Testing processes
- Partner with Tools and Technology Team to select, implement, develop, and automate testing with appropriate tools.
- Work with cross functional teams to develop remediation suggestions
- Report observations using our standardized reporting structure
- The engineer may frequently lift and/or move up to 25 pounds
Basic Qualifications
- Bachelor’s degree in computer science or software engineering, electrical engineering, or equivalent experience
- 2.5+ years demonstrated experience in the information security-VA, PT field
- Exposure to security testing within the appropriate domain
Preferred Qualifications
- Experience in pentesting – Web, Network, Embedded security ( Hardware and Firmware) , Protocol fuzzing, Mobile App, Thick Client,API, Web services, Cloud
- Fuzzing various Industrial protocols like Modbus (TCP and RTU), BACnet, DNP3 and IT protocols like FTP, Telnet, SSH, HTTP(s), SNMP v1/2/3, NTP, RADIUS, MQTT, DNS.
- Understanding of application protocols, development, and common attack vectors.
- Good cybersecurity capabilities and strong software engineering skills
- Experience with pentest tools and frameworks such as: Burp Suite, IDA Pro, GHidra, Kali, OWASP, Metasploit, Nessus, Nmap, MObSF, Genymotion, Frida, APK Tool
- Scripting experience in Python, Powershell and Bash preferred.
- Experience working with other languages such as C, C++, Java, .NET or javascript.
- Excellent understanding of security by design principles and architecture level security concepts
- Experience and knowledge of penetration testing methodologies and tools
- Up to date knowledge of current and emerging security threats and techniques for exploiting security vulnerabilities
- Effective oral and written communication skills
- Good interpersonal skills
- Experience in security testing within the appropriate domain
- Demonstrated project management skills.
- Good Presentation skills
- Relevant Security certifications: CEH, OSCP, GPEN
- Familiarity with reverse engineering tools, debuggers, and dynamic analysis techniques
Honeywell Kolkata, West Bengal, IND Office
8th Floor, P S Srijan Tech Park, DN 52, DN Block, Sector V, Bidhannagar, Kolkata, West Bengal, India, 700091
Similar Jobs
Aerospace • Artificial Intelligence • Cloud • Machine Learning • Software • Cybersecurity • Defense
Perform L2 security monitoring and incident response: analyze and remediate network intrusions and endpoint compromises, build processes and automation, mentor L1 analysts, document incidents, and collaborate with global teams in a 24/7 shift rotation to drive incidents to closure.
Top Skills:
AWSAzureDemistoEdrKill ChainLinuxMdeMicrosoft Defender For EndpointsMicrosoft Office 365Mitre Att&CkPowershellPythonSIEMSplunkWindowsXsoar
Aerospace • Artificial Intelligence • Cloud • Machine Learning • Software • Cybersecurity • Defense
Lead cyber risk assessments, maintain IT risk registers, remediate technical debt, develop KRIs/KPIs and reporting, support privacy and third-party risk activities, aid incident response, and collaborate across IT, legal, product, and regulatory teams to drive continuous improvement in IT risk management.
Top Skills:
CcpaCmmcCobitGdprGrcIso27001Nist
Aerospace
Perform security assessments and testing of Honeywell products and partner technologies across hardware, firmware, applications, networks, mobile and cloud. Develop repeatable testing processes, automate tools, identify vulnerabilities, recommend remediations, and report findings to cross-functional teams.
Top Skills:
.NetApktoolBacnetBashBurp SuiteCC++Cloud Security ToolsDnp3DnsFridaFtpGenymotionGhidraHttp(S)Ida ProJavaJavaScriptKaliMetasploitMobile Security ToolsMobsfModbus (TcpMqttNessusNmapNtpOwaspPowershellProtocol FuzzingPythonRadiusReverse Engineering ToolsRtu)Snmp V1/V2/V3SshTelnet
What you need to know about the Kolkata Tech Scene
When considering the industries shaping India's tech scene, gaming might not immediately come to mind. However, in the last decade, increased internet usage and greater access to mobile devices have catapulted the industry to new heights, with Kolkata-based companies like Virtualinfocom, Red Apple Technologies and Digitoonz, at the forefront, driving the design and animation of new gaming titles for players.
