Job Title: Cyber Security Engineer 2 (Offensive)

Overview

We are seeking a full-time Cyber Security Engineer 2 (Offensive) in our Olathe, KS location. In this role, you will be responsible for designing, developing, and implementing solutions and metrics to successfully integrate and monitor new information security and identity management systems with the existing architecture.
Essential Functions
Ensures adherence to Garmin's information security strategy, programs and best practicesDeploys security policies, investigates and evaluates alerts for malicious file execution attempts, and designs enhanced protocols aligned with protecting corporate wide production systemsLeads root-cause analysis efforts to determine improvement opportunities when failures occurReports and communicates with relevant departments in the organization, coordinates department level non-project changes, and facilitates team discussions and meetingsDesigns and develops complex, integrated solutions to meet business requirements or enhance performance of Garmin's security systems and creates/develops security assessment solutionsPerforms and evaluates costs analyses and vendor comparisons from small through large scale projects to ensure cost-effective and efficient operationsMeasures feasibility of various approaches and makes recommendationsCommunicates effectively regarding system operations and environment changesAdheres to SOX, PCI, and other regulatory requirements as dictatedUnderstands and avoids potential threats and drives counter measures for IT managed systemsEnsures that all security requirements are met or exceededProvides significant contributions to defining team roadmap and prioritiesResearches new technologies and proposes cost effective solutions and contributes input to broader technology solutions outside of disciplineRecognized as an expert in assigned discipline at Garmin and applies extensive technical expertise and analysis to initiatives while developing reliable solutions to complex problems which require the regular use of ingenuity, creativity, and innovationDemonstrates proficiency with either the Python or Ruby programming languagePerforms in-depth penetration and security assessment testing for Garmin computer systems, products, and software on a global scaleConducts regular security audits from both a logical/theoretical standpoint and a technical/hands-on standpointProvides expertise with industry trusted infrastructure and development penetration tools and with security, infrastructure, software development, and application technologiesProficiency with various methods of reconnaissance, information gathering including network analysis, web application analysis, database analysisProficiency with various methods of threat modeling and vulnerability assessment including vulnerability scanners, password crackers, network protocol attacksWillingness and capability to exceed mastery of common penetration tools toward a deeper understanding of the technology that is needed to reveal vulnerabilities that standard tool proficiency does notWillingness to learn or experience with device hacking / reverse engineering of products and devices Basic Qualifications
Bachelor's Degree in Computer Science, Information Technology, Management Information Systems, Business or related field AND a minimum of 2 years relevant experience OR an equivalent combination of education and experienceDriven problem solver with proven success in solving difficult problems with demonstrated quality and effectiveness in work documentation and organizationDesired Qualifications
Previous experience in penetration testingOCCP, GPEN, and or other penetration testing certifications
Garmin International is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, citizenship, sex, sexual orientation, gender identity, veteran's status, age or disability.

This position is eligible for Garmin's benefit program. Details can be found here: Garmin Benefits