Advanced Cyber Sec Archt/Engr

Advanced Cyber Sec Archt/Engr for Honeywell International, Inc. in Duluth, GA

Responsibilities:

Strong penetration testing experience with exceptional analytical capabilities, excellent writing skills, and polished presentation skills.

Work directly with customers to negotiate and document pre-engagement, travel to site to perform on-site testing or testing of general technology in our cyber security COE in Duluth, GA, engage with customers to summarize findings, followed by preparation of testing report.

Perform security assessment of IT and/or OT systems, software, database, or hardware.

Network design and common IT/OT protocols.

Perform hands-on network, OS, domain, and application penetration testing.

Utilize one or more scripting and programming languages, such as Python, JavaScript, Perl, Ruby, VB.Net, C++, C#, Java, Powershell, etc.

Perform manual penetration testing in IT and OT software, hardware, and infrastructure.

Perform penetration testing using commercial and open source tools.

Produce high quality pre-engagement documents and comprehensive penetration testing reports.

Research on cyber security trends, testing techniques, best practices, and industry standards.

Knowledge of industrial control system (ICS), DCS, SCADA, PLC. Safety Instrumented Systems (SIS), Purdue model architecture.

Network design, virtualization network design, and network/information security design.

Industrial safety awareness through the completion of pertinent safety certifications.

Industry proficiency with latest technologies in the cyber security domain.

ADDITIONAL INFORMATION:

Location: Duluth, GA

40 hours/week

Employee Referral Fee: $1500

If offered employment must have legal right to work in U.S. EOE.

YOU MUST HAVE:

Qualified applicants must have a Bachelor’s* degree or foreign equivalent in Computer Science, Computer Information Systems, Cyber Security or related field and 7 years of experience in Informational and Operational Technology (IT & OT). Full term of experience must include: expert knowledge of the life cycle of network threats, attacks, attack vectors, and methods of exploitation with an understanding of intrusion set tactics, techniques, and procedures; experience in LAN architectures & related diagnostic tools; LAN networking principles and protocols including Ethernet, hubs, switches, Routers, TCP/IP, VLAN, Next Generation Firewall, DMZ, VPN, IDS, IPS; TCP/IP protocols – SMTP, SNMP, SCP, SSL, HTTP, SSH, SSL; common industrial communication protocols – Modbus, Devicenet, Profibus, Foundation Fieldbus, DNP3, and OPC, Microsoft – Active Directory, DNS, WSUS, Terminal Server, PowerShell; experience with anti-virus systems, backup & restore solutions, system management; experience utilizing network analysis tools, What’s Up Gold, Solar Winds, etc.; experience with log collection, management, and reporting; experience with enterprise and industrial wireless technology; working knowledge of open source and commercial penetration testing tools such as Metasploit, Cobalt Strike, Kali Linux, Nessus, Nmap, Nexpose, Wireshark, etc.; experience with IT penetration test. Must have 5 years of experience with the following: experience with OT penetration test of Industrial Control Systems (ICS) and critical infrastructure. Must have valid OSCP and/or OSCE certifications. Up to 75% domestic or international travel required. Telecommuting permitted up to two (2) times per week. *Employer will accept 2 years of experience in lieu of a Bachelor’s degree.

Honeywell is an equal opportunity employer. Qualified applicants will be considered without regard to age, race, creed, color, national origin, ancestry, marital status, affectional or sexual orientation, gender identity or expression, disability, nationality, sex, religion, or veteran status.