Cyber Security Manager

Honeywell•Phoenix, AZ

49d•Hybrid

About The Position

Honeywell is hiring a Cyber Security Manager to sit in Phoenix, AZ and operate on a hybrid work schedule. Join a cutting-edge aerospace product security team shaping the future of secure flight systems and defense technologies. We're seeking an experienced and highly skilled security engineering minded software development leader to design, maintain and continually improve internal tools that support cybersecurity workflows, risk assessments, and technical collaboration. This role emphasizes crafting intuitive, robust solutions that empower engineers and cybersecurity analysts across product lifecycles-balancing usability, availability, compliance, and performance. You will lead and manage a software development team working directly with cybersecurity SMEs, systems engineers, IT, and risk managers to design toolsets that reduce friction, elevate transparency, and accelerate decision-making in product security and governance processes. As a key leader in our growing product security team, you'll leverage your proven experience and...

Requirements

6+ years software engineering development, prototyping, testing, and release
Bachelor's Degree in Engineering
On call availability to support 24/7 operations/rotation
Experience leading formal product software release processes
Experience leading software development teams
Experience planning and prioritizing software features to meet business needs/timing
Experience working with cross functional teams to deploy cybersecurity tooling
Experience continuous improvement and optimization
Experienced leading software design reviews and evaluating compliance with modeling standards
Ability to work independently with minimal oversight, while providing technical leadership to a team of developers
Understanding of Agile software development practices

Nice To Haves

Exceptional troubleshooting skills with commitment to availability and quality
Experience with containers and orchestration
Experience with database and storage integration
Experience in deploying disaster recovery and backups including configuring automated backups, failover systems, and redundancy
Experience ensuring compliance and governance - applications are hosted in a way that meets compliance, auditability, and traceability
Understanding of Secure Software Development Lifecycle (SSDLC), including threat modeling, static/dynamic code analysis, and remediation workflows
Experience or familiarity with Black Duck Hub, Coverity, or SD Elements
Familiarity with cloud environments. CI/CD tools, containerization, and monitoring solutions
Familiarity with product risk management frameworks (e.g., NIST SP 800-37, UNR 155, DO 355 or others)
Good communication and leadership skills
Good interpersonal skills with the ability to facilitate diverse groups, help negotiate priorities, and resolve conflicts among project stakeholders
Certifications in security and privacy demonstrating deep practical knowledge such as CSSLP

Responsibilities

Own and evolve internally developed cybersecurity tooling, including key integration of product cybersecurity tooling for Honeywell Aerospace, ensuring performance, scalability, and usability
Manage a small team of software engineers responsible for architecting and implementing scalable software solutions in Java/Groovy and Python, deploying new features and service enhancements with agility
Plan and prioritize key tool chain features to enable the aerospace product cybersecurity team quality and efficiency in execution of SDLC process and security artifact development.
Prioritize development and maintenance of custom Jira integrations, enabling seamless collaboration and data flow across risk, compliance, cybersecurity vulnerability tooling, and engineering platforms
Manage integration of cybersecurity tooling into CI/CD pipelines.
Deliver enterprise-ready tooling that meets high availability and uptime standards
Lead/manage software design reviews for product cybersecurity tooling.
Collaborate with a globally diverse tooling team that supports 24x7 global operations
Champion secure software development lifecycle (SSDLC) practices, embedding cybersecurity into code
Act as an advocate and coach for secure coding practices in internal toolchain development.
Collaborate with stakeholders across cybersecurity, product engineering, and infrastructure teams to align tooling strategy and evolving business needs
Improve user experience of internal risk assessment platforms by prioritizing and streamlining interfaces and reducing manual data entry
Collaborate with data analytics teams to Integrate disparate systems into unified dashboards for tracking product security metrics, vulnerabilities, and mitigations
Collaborate with cybersecurity leadership and engineering stakeholders to uncover pain points and deliver thoughtful, usable solutions
Modernize legacy systems and integrate/automate compliance-related reports from security tools with high reliability
Support continuous improvement of cybersecurity tools through user feedback, prototyping, and iteration