Johnson Controls · 3 hours ago
Application Security Engineer
Johnson Controls is a global leader in smart, healthy and sustainable buildings, focused on reimagining the performance of buildings. The Application Security Engineer will drive continuous improvement initiatives in cybersecurity, ensuring proactive management of security and data privacy risks across the full lifecycle of products and applications.
Industrial EngineeringPhysical SecuritySmart Building
Responsibilities
Provide cybersecurity expertise and guidance to application development teams, security champions, and business leaders throughout all phases of the software development life cycle
Drive policy compliance and high quality for secure SDLC activities – security requirements, security architectures, threat and attack models, supply chain security, code reviews, SAST, DAST, IAST, penetration testing, and security, hardening
Architect security and privacy by design and secure-by-default into software applications for mobile, embedded systems, and cloud
Drive efforts to quantify residual product and application risk and identify appropriate security controls
Review application architectures for security design gaps and vulnerabilities and consult with development teams to remediate or mitigate cyber risk
Assist coordination of third-party penetration testing vendor engagements with product teams
Help engineers and product managers identify solutions to meet cybersecurity requirements
Maintain current knowledge of security threats and vulnerabilities that could impact products and applications
Support incident response operations, training, and exercises, including exploitation analysis and countermeasure testing
Assist coordination and tracking of vulnerability remediation activities
Raise security awareness and drive security training and certification for people and products
Support periodic reporting to senior executive leadership on health and status of the application security program, cybersecurity risks, risk mitigations, and trends
Use agile project management to manage resources and track milestones and deliverables
Support internal audits and assessments to identify risks and determine mitigation actions
Identify cybersecurity opportunities that enhance the developer and customer experience
Support cybersecurity risk and technology assessments
Qualification
Required
Knowledge of cybersecurity compliance, regulations, industry standards and certifications
Excellent written and verbal communication and presentation skills
Customer relations acumen with ability to explain complex technical details to a wide audience
Excellent interpersonal, organizational, written and verbal communication skills
Relevant work experience
BS/BA in cybersecurity, computer science, engineering, or related technical degree or equivalent years of experience
Up to 10-15% travel, including international
Preferred
Experience with Operational Technologies (e.g. Controls Systems, Building Management) a plus
Cybersecurity certifications, e.g. CISSP, GSEC, Sec+, or related are preferred
Benefits
Paid vacation/holidays/sick time
Comprehensive benefits package including 401K, medical, dental, and vision care
On the job/cross training opportunities
Encouraging and collaborative team environment
Dedication to safety through our Zero Harm policy
Company
Johnson Controls
Johnson Controls offers smart buildings that create safe, healthy, and sustainable environments.
H1B Sponsorship
Johnson Controls has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (61)
2024 (57)
2023 (80)
2022 (95)
2021 (81)
2020 (93)
Funding
Current Stage
Public CompanyTotal Funding
$1.6BKey Investors
US Department of Energy
2024-12-05Post Ipo Debt· $250M
2024-12-04Post Ipo Debt· $525.61M
2024-05-20Post Ipo Equity· $90M
Leadership Team
Recent News
altenergymag.com
2025-12-25
Company data provided by crunchbase