Cyber Security Manager

Honeywell is hiring a Cyber Security Manager to sit in Phoenix, AZ and operate on a hybrid work schedule. Join a cutting-edge aerospace product security team shaping the future of secure flight systems and defense technologies. We’re seeking an experienced and highly skilled security engineering minded software development leader to design, maintain and continually improve internal tools that support cybersecurity workflows, risk assessments, and technical collaboration. This role emphasizes crafting intuitive, robust solutions that empower engineers and cybersecurity analysts across product lifecycles—balancing usability, availability, compliance, and performance.

You will lead and manage a software development team working directly with cybersecurity SMEs, systems engineers, IT, and risk managers to design toolsets that reduce friction, elevate transparency, and accelerate decision-making in product security and governance processes.

As a key leader in our growing product security team, you'll leverage your proven experience and...

• Own and evolve internally developed cybersecurity tooling, including key integration of product cybersecurity tooling for Honeywell Aerospace, ensuring performance, scalability, and usability
• Manage a small team of software engineers responsible for architecting and implementing scalable software solutions in Java/Groovy and Python, deploying new features and service enhancements with agility
• Plan and prioritize key tool chain features to enable the aerospace product cybersecurity team quality and efficiency in execution of SDLC process and security artifact development.
• Prioritize development and maintenance of custom Jira integrations, enabling seamless collaboration and data flow across risk, compliance, cybersecurity vulnerability tooling, and engineering platforms
• Manage integration of cybersecurity tooling into CI/CD pipelines.
• Deliver enterprise-ready tooling that meets high availability and uptime standards
• Lead/manage software design reviews for product cybersecurity tooling.
• Collaborate with a globally diverse tooling team that supports 24x7 global operations
• Champion secure software development lifecycle (SSDLC) practices, embedding cybersecurity into code
• Act as an advocate and coach for secure coding practices in internal toolchain development.
• Collaborate with stakeholders across cybersecurity, product engineering, and infrastructure teams to align tooling strategy and evolving business needs
• Improve user experience of internal risk assessment platforms by prioritizing and streamlining interfaces and reducing manual data entry
• Collaborate with data analytics teams to Integrate disparate systems into unified dashboards for tracking product security metrics, vulnerabilities, and mitigations
• Collaborate with cybersecurity leadership and engineering stakeholders to uncover pain points and deliver thoughtful, usable solutions
• Modernize legacy systems and integrate/automate compliance-related reports from security tools with high reliability
• Support continuous improvement of cybersecurity tools through user feedback, prototyping, and iteration

YOU MUST HAVE:

• 6+ years software engineering development, prototyping, testing, and release
• Bachelor’s Degree in Engineering
• On call availability to support 24/7 operations/rotation
• Experience leading formal product software release processes
• Experience leading software development teams
• Experience planning and prioritizing software features to meet business needs/timing
• Experience working with cross functional teams to deploy cybersecurity tooling
• Experience continuous improvement and optimization
• Experienced leading software design reviews and evaluating compliance with modeling standards
• Ability to work independently with minimal oversight, while providing technical leadership to a team of developers
• Understanding of Agile software development practices

WE VALUE:

• Exceptional troubleshooting skills with commitment to availability and quality
• Experience with containers and orchestration
• Experience with database and storage integration
• Experience in deploying disaster recovery and backups including configuring automated backups, failover systems, and redundancy
• Experience ensuring compliance and governance – applications are hosted in a way that meets compliance, auditability, and traceability
• Understanding of Secure Software Development Lifecycle (SSDLC), including threat modeling, static/dynamic code analysis, and remediation workflows
• Experience or familiarity with Black Duck Hub, Coverity, or SD Elements
• Familiarity with cloud environments. CI/CD tools, containerization, and monitoring solutions
• Familiarity with product risk management frameworks (., NIST SP 800-37, UNR 155, DO 355 or others)
• Good communication and leadership skills
• Good interpersonal skills with the ability to facilitate diverse groups, help negotiate priorities, and resolve conflicts among project stakeholders
• Certifications in security and privacy demonstrating deep practical knowledge such as CSSLP