AppSec Jobs

Honeywell Security Team

Open security roles at Honeywell, and what we know about the team behind them.

electrical/electronic manufacturing · 102,000 employees · 3 open roles. Updated October 15, 2026.

Security at Honeywell

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

How they approach application security

  • Honeywell's AppSec philosophy centers on minimizing customer risk associated with security vulnerabilities through automated integration into the development lifecycle.
  • Their mission is to 'minimize customers' risk associated with security vulnerabilities.' Security is not treated as a separate gate but is 'automatically built into our software development lifecycle,' with Product Security Leaders integrated directly into the release process.
  • They utilize a risk-based approach where vulnerabilities are 'scored via the CVSS' and emphasize a commitment to 'quickly evaluate and address' security concerns.

The team

The AppSec function at Honeywell is primarily managed by the Product Security Incident Response Team (PSIRT), which 'manages the receipt, investigation, internal coordination, remediation and disclosure' of vulnerabilities. Key public-facing leaders include Chase Carpenter (Chief Security Officer) and Matthew Bohne (Chief Product Security Officer). The team's goal is to 'minimize customers' risk' through vulnerability management. Specific team size estimates and active job postings for dedicated AppSec roles were not publicly available as of March 2026.

What they're working on

Honeywell practices 'Shift Left' by ensuring 'security reviews are automatically built into our software development lifecycle' and integrating Product Security Leaders into the release process to work with developers. Their vulnerability management process includes a coordinated disclosure program where they 'encourage coordinated disclosure' via email (PSIRT@honeywell.com). Upon intake, they 'commit the appropriate resources to analyze, validate, and address the issue.' There is no public evidence of a formal 'Security Champions' program or specific new initiatives launched within the last six months.