Senior Cyber Security Engineer

Job Description

Role Overview:As a Cyber Security Engineer II at Garmin, you will be responsible for performing comprehensive penetration testing, vulnerability assessments, and risk analysis across Garmins global computer systems, products, and software. You will cover various security aspects including web, API, infrastructure, mobile, and hardware security through ethical hacking engagements. Your role will involve ensuring adherence to Garmins information security strategy, programs, and best practices. Additionally, you will design, develop, and implement solutions and metrics to integrate and monitor new information security and identity management systems with the existing architecture. You will also lead root-cause analysis efforts to determine improvement opportunities when failures occur.Key Responsibilities:- Perform in-depth penetration and security assessment testing for Garmin computer systems, products, and software on a global scale- Utilize industry trusted infrastructure and development penetration tools- Demonstrate expertise in security, infrastructure, software development, and application technologies- Conduct regular security audits from both a logical/theoretical standpoint and a technical/hands-on standpoint- Possess knowledge of authentication protocols such as OAuth2, JWT, SAML, Kerberos, NTLM- Execute red teaming tactics including Active Directory exploitation, lateral movement, persistence, and evasion- Manage vulnerabilities and communicate effectively with system owners in English- Develop security assessment solutions and daily administrative tasks- Design and develop complex, integrated solutions to meet business requirements- Adhere to regulatory requirements such as SOX, PCI, and other standards- Provide significant contributions to defining team roadmap and priorities- Serve as a mentor and provide guidance to less experienced IT workers- Research new technologies and propose cost-effective solutionsQualifications Required:- Bachelor of Science Degree in Computer Science, Information Technology, Management Information Systems, Business, or a relevant field AND a minimum of 6 years of relevant experience OR equivalent combination of education and relevant experience- Outstanding academics with the ability to apply learned knowledge- Fluency in English is required- Strong verbal, written, and interpersonal communication skills in a small team setting- Team-oriented with a positive attitude and ability to work well with others- Driven problem solver with proven success in solving difficult problems- Excellent time management and follow-up skills- Consistent quality and effectiveness in work documentation and organization- Ability to exploit vulnerabilities and provide actionable remediation recommendations beyond scanning capabilitiesCertifications (Preferred):- Must-have: OSCP- Nice-to-have: OSEP, OSWE, CRTP, PNPT, eWPTX, Red Team-focused certifications Role Overview:As a Cyber Security Engineer II at Garmin, you will be responsible for performing comprehensive penetration testing, vulnerability assessments, and risk analysis across Garmins global computer systems, products, and software. You will cover various security aspects including web, API, infrastructure, mobile, and hardware security through ethical hacking engagements. Your role will involve ensuring adherence to Garmins information security strategy, programs, and best practices. Additionally, you will design, develop, and implement solutions and metrics to integrate and monitor new information security and identity management systems with the existing architecture. You will also lead root-cause analysis efforts to determine improvement opportunities when failures occur.Key Responsibilities:- Perform in-depth penetration and security assessment testing for Garmin computer systems, products, and software on a global scale- Utilize industry trusted infrastructure and development penetration tools- Demonstrate expertise in security, infrastructure, software development, and application technologies- Conduct regular security audits from both a logical/theoretical standpoint and a technical/hands-on standpoint- Possess knowledge of authentication protocols such as OAuth2, JWT, SAML, Kerberos, NTLM- Execute red teaming tactics including Active Directory exploitation, lateral movement, persistence, and evasion- Manage vulnerabilities and communicate effectively with system owners in English- Develop security assessment solutions and daily administrative tasks- Design and develop complex, integrated solutions to meet business requirements- Adhere to regulatory requirements such as SOX, PCI, and other standards- Provide significant contributions to defining team roadmap and priorities- Serve as a mentor and provide guidance to less experienced IT workers- Research new technologies and propose cost-effective solutionsQualifications Required:- Bachelor of Science Degree in Computer Scie

Keyskills :
Penetration TestingRisk AnalysisEthical HackingInformation SecurityIdentity ManagementThreat ModelingSDLCAuthentication ProtocolsSecurity AuditsVulnerability AssessmentPythonPowerShellBashRubyNmapNessusMetasploitReverse EngineeringNetwor