We are seeking a full-time Cyber Security Engineer 2 (Offensive) in our Olathe, KS location. In this role, you will be responsible for designing, developing, and implementing solutions and metrics to successfully integrate and monitor new information security and identity management systems with the existing architecture.
Essential Functions
Ensures adherence to Garmin's information security strategy, programs and best practices
Deploys security policies, investigates and evaluates alerts for malicious file execution attempts, and designs enhanced protocols aligned with protecting corporate wide production systems
Leads root-cause analysis efforts to determine improvement opportunities when failures occur
Reports and communicates with relevant departments in the organization, coordinates department level non-project changes, and facilitates team discussions and meetings
Designs and develops complex, integrated solutions to meet business requirements or enhance performance of Garmin's security systems and creates/develops security assessment solutions
Performs and evaluates costs analyses and vendor comparisons from small through large scale projects to ensure cost-effective and efficient operations
Measures feasibility of various approaches and makes recommendations
Communicates effectively regarding system operations and environment changes
Adheres to SOX, PCI, and other regulatory requirements as dictated
Understands and avoids potential threats and drives counter measures for IT managed systems
Ensures that all security requirements are met or exceeded
Provides significant contributions to defining team roadmap and priorities
Researches new technologies and proposes cost effective solutions and contributes input to broader technology solutions outside of discipline
Recognized as an expert in assigned discipline at Garmin and applies extensive technical expertise and analysis to initiatives while developing reliable solutions to complex problems which require the regular use of ingenuity, creativity, and innovation
Demonstrates proficiency with either the Python or Ruby programming language
Performs in-depth penetration and security assessment testing for Garmin computer systems, products, and software on a global scale
Conducts regular security audits from both a logical/theoretical standpoint and a technical/hands-on standpoint
Provides expertise with industry trusted infrastructure and development penetration tools and with security, infrastructure, software development, and application technologies
Proficiency with various methods of reconnaissance, information gathering including network analysis, web application analysis, database analysis
Proficiency with various methods of threat modeling and vulnerability assessment including vulnerability scanners, password crackers, network protocol attacks
Willingness and capability to exceed mastery of common penetration tools toward a deeper understanding of the technology that is needed to reveal vulnerabilities that standard tool proficiency does not
Willingness to learn or experience with device hacking / reverse engineering of products and devices
Basic Qualifications
Bachelor's Degree in Computer Science, Information Technology, Management Information Systems, Business or related field AND a minimum of 2 years relevant experience OR an equivalent combination of education and experience
Driven problem solver with proven success in solving difficult problems with demonstrated quality and effectiveness in work documentation and organization
Desired Qualifications
Previous experience in penetration testing
OSCP, GPEN, and or other penetration testing certifications
Garmin International is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, citizenship, sex, sexual orientation, gender identity, veteran's status, age or disability.
This position is eligible for Garmin's benefit program. Details can be found here: Garmin Benefits