Bachelor's degree plus 9 years relevant experience or Master's degree plus 8 years relevant experience, or equivalent combination of education and experience.
Experience in information security or product security with knowledge of cryptography, PKI, and secure software development practices.
Proven ability to independently solve complex technical security problems.
Strong verbal, written, and interpersonal communication skills.
Ability to collaborate effectively under challenging circumstances.
Proficient in high-level programming languages such as C, C++, C#, Rust, Python, and/or Java.
Experience mentoring junior engineers in security engineering practices.
Responsibilities
Lead product security engineering activities and guide project planning for security-related work.
Define security approaches, requirements, and solutions for complex product security issues.
Conduct security design reviews, identify risks, and recommend mitigations.
Perform threat analysis and system security risk assessments, advising teams on mitigation strategies.
Translate conceptual security objectives into practical implementation guidance and process definitions.
Develop and promote security policies, processes, and standards for consistent application across projects.
Provide technical input to product development plans and security roadmaps.
Benefits
Eligible for Garmin's benefit program.
Full Job Description
Overview
We are seeking a full-time Technical Lead Security Engineer at Garmin's U.S. headquarters in the Greater Kansas City area. In this role, you will be responsible for applying technical expertise in product security engineering for Garmin products and services, provides direct support on threat analysis, risk mitigation, security requirements, secure design practices, implementation of security features, and security process improvements.
Essential Functions
Serve as a technical leader for product security engineering activities, guiding the technical direction of projects and supporting project planning for security-related work
Apply technical expertise to define security approaches, requirements, acceptance criteria, and specific solutions for complex product security problems
Lead and contribute to security design and design reviews across multiple product types, identifying risks, recommending mitigations, and promoting secure design practices
Understand current and emerging security threats; perform security reviews, threat analysis, and system security risk assessments; and advise teams on practical mitigation strategies
Take conceptual security objectives and reduce them to practice through implementation guidance, process definition, tooling recommendations, and validation planning
Develop and promote policies, processes, standards, and guidelines that integrate security into product development and support consistent application across projects
Provide technical input to product development plans, concept documents, security roadmaps, and business-relevant security decisions
Develop reliable solutions to complex security problems that require sound judgment, creativity, and regular use of engineering tools and techniques
Evaluate, recommend, and leverage security tools, reusable components, and engineering practices that improve product security outcomes
Mentor less experienced engineers, share information beyond the immediate team, and support development of security knowledge across engineering teams
Offer suggestions to improve security and engineering processes and author procedures, standards, or guidance where appropriate
Provide security-focused training and awareness to engineering teams and project stakeholders
Basic Qualifications
Bachelor's degree plus 9 years relevant experience or Master's degree plus 8 years relevant experience or equivalent combination of education and relevant experience
Relevant information security or product security experience with working knowledge of cryptography, Public Key Infrastructure (PKI), software security (AppSec), secure software development practices, and hardware-based security controls
Demonstrates technical expertise and the ability to independently determine general approaches and specific solutions to technical security problems
Demonstrates strong and effective verbal, written, and interpersonal communication skills
Demonstrates ability to work collaboratively and professionally with others under challenging circumstances
Must possess detailed knowledge and experience with high-level language structure in C, C++, C#, Rust, Python, and/or Java relevant to Garmin's business needs
Capable of mentoring junior engineer associates in security engineering practices
This position is eligible for Garmin's benefit program. Details can be found here: Garmin Benefits
About Garmin
Garmin Ltd. is an American multinational technology company founded in 1989 by Gary Burrell and Min Kao in Lenexa, Kansas. The company specializes in GPS technology for automotive, aviation, marine, outdoor, and sport activities. Garmin's products serve aviation, marine, automotive, wireless, outdoor recreation, and fitness markets. The company's goal is to create navigation and communication devices that can enrich customers' lives. Garmin has offices in the United States, Europe, and Asia. The company's products are sold in over 100 countries.
