Technical Lead Security Engineer (Product/Device Security)

Garmin; Cary (NC); On-site; USD 140,000 - 190,000; Full time

Job summary

Garmin is seeking a Technical Lead Security Engineer for full-time employment at Garmin's U.S. headquarters. You will apply technical expertise in product security engineering, support threat analysis, define security requirements, and drive secure design practices across Garmin products and services.

The role includes mentoring engineers, guiding security reviews, and contributing to security roadmaps and process improvements to enhance product security outcomes.

Qualifications

• Security engineering experience focused on Garmin products and services.
• Experience with threat modeling and risk mitigation.

Responsibilities

• Lead product security engineering activities and guide project security direction.

Skills

Security engineering

Threat analysis

Secure design

Cryptography PKI AppSec

Secure SDLC

C/C/C#/Rust/Python/Java

Mentoring

Education

Bachelor’s degree + 9 years

Master’s + 8 years

Tools

Security tools

Job description

Overview

We are seeking a full-time Technical Lead Security Engineer at Garmin's U.S. headquarters in the Greater Kansas City area. In this role, you will be responsible for applying technical expertise in product security engineering for Garmin products and services, provides direct support on threat analysis, risk mitigation, security requirements, secure design practices, implementation of security features, and security process improvements.

Essential Functions

• Serve as a technical leader for product security engineering activities, guiding the technical direction of projects and supporting project planning for security-related work
• Apply technical expertise to define security approaches, requirements, acceptance criteria, and specific solutions for complex product security problems
• Lead and contribute to security design and design reviews across multiple product types, identifying risks, recommending mitigations, and promoting secure design practices
• Understand current and emerging security threats; perform security reviews, threat analysis, and system security risk assessments; and advise teams on practical mitigation strategies
• Take conceptual security objectives and reduce them to practice through implementation guidance, process definition, tooling recommendations, and validation planning
• Develop and promote policies, processes, standards, and guidelines that integrate security into product development and support consistent application across projects
• Provide technical input to product development plans, concept documents, security roadmaps, and business-relevant security decisions
• Develop reliable solutions to complex security problems that require sound judgment, creativity, and regular use of engineering tools and techniques
• Evaluate, recommend, and leverage security tools, reusable components, and engineering practices that improve product security outcomes
• Mentor less experienced engineers, share information beyond the immediate team, and support development of security knowledge across engineering teams
• Offer suggestions to improve security and engineering processes and author procedures, standards, or guidance where appropriate
• Provide security-focused training and awareness to engineering teams and project stakeholders

Basic Qualifications

• Bachelor’s degree plus 9 years relevant experience or Master’s degree plus 8 years relevant experience or equivalent combination of education and relevant experience
• Relevant information security or product security experience with working knowledge of cryptography, Public Key Infrastructure (PKI), software security (AppSec), secure software development practices, and hardware-based security controls
• Demonstrates technical expertise and the ability to independently determine general approaches and specific solutions to technical security problems
• Demonstrates strong and effective verbal, written, and interpersonal communication skills
• Demonstrates ability to work collaboratively and professionally with others under challenging circumstances
• Must possess detailed knowledge and experience with high-level language structure in C, C++, C#, Rust, Python, and/or Java relevant to Garmin’s business needs
• Capable of mentoring junior engineer associates in security engineering practices

Garmin International is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, citizenship, sex, sexual orientation, gender identity, veteran’s status, age or disability.

This position is eligible for Garmin's benefit program. Details can be found here: Garmin Benefits