Technical Lead Security Engineer (Product/Device Security)

Garmin Ltd.; Olathe (KS); On-site; USD 130,000 - 190,000; Full time

Job summary

Garmin International in the Greater Kansas City area seeks a full-time Technical Lead Security Engineer to apply expertise in product security engineering for Garmin products and services. You will provide threat analysis, risk mitigation, secure design practices, and drive security process improvements.

Lead security design reviews, model threats, define requirements, mentor engineers, and contribute to roadmaps and security decisions across multiple product families.

Qualifications

• Bachelor’s degree plus 9 years relevant experience or Master’s degree plus 8 years relevant experience
• Experience with cryptography, PKI, AppSec, secure software development practices, and hardware security controls
• Ability to mentor engineers and communicate effectively
• Proficiency with C, C++, C#, Rust, Python, or Java as used in Garmin’s stack

Responsibilities

• Serve as a technical leader for product security engineering activities and guide project direction
• Define security approaches, requirements, and acceptance criteria for complex problems
• Lead security design reviews and threat analyses across product types
• Perform security reviews, threat modeling, and risk assessments with practical mitigations
• Translate security objectives into actionable guidance, tooling, and validation plans
• Develop and promote security policies, standards, and guidelines across projects
• Provide input to product roadmaps and security decisions
• Mentor engineers and share security knowledge across teams

Skills

Security engineering

Cryptography

PKI

AppSec

Secure SDLC

Mentoring

Communication

Programming languages

Education

Bachelor’s or Master’s degree in a related field

Job description

Overview

We are seeking a full-time Technical Lead Security Engineer at Garmin's U.S. headquarters in the Greater Kansas City area. In this role, you will be responsible for applying technical expertise in product security engineering for Garmin products and services, provides direct support on threat analysis, risk mitigation, security requirements, secure design practices, implementation of security features, and security process improvements.

Essential Functions

• Serve as a technical leader for product security engineering activities, guiding the technical direction of projects and supporting project planning for security-related work
• Apply technical expertise to define security approaches, requirements, acceptance criteria, and specific solutions for complex product security problems
• Lead and contribute to security design and design reviews across multiple product types, identifying risks, recommending mitigations, and promoting secure design practices
• Understand current and emerging security threats; perform security reviews, threat analysis, and system security risk assessments; and advise teams on practical mitigation strategies
• Take conceptual security objectives and reduce them to practice through implementation guidance, process definition, tooling recommendations, and validation planning
• Develop and promote policies, processes, standards, and guidelines that integrate security into product development and support consistent application across projects
• Provide technical input to product development plans, concept documents, security roadmaps, and business-relevant security decisions
• Develop reliable solutions to complex security problems that require sound judgment, creativity, and regular use of engineering tools and techniques
• Evaluate, recommend, and leverage security tools, reusable components, and engineering practices that improve product security outcomes
• Mentor less experienced engineers, share information beyond the immediate team, and support development of security knowledge across engineering teams
• Offer suggestions to improve security and engineering processes and author procedures, standards, or guidance where appropriate
• Provide security-focused training and awareness to engineering teams and project stakeholders

Basic Qualifications

• Bachelor’s degree plus 9 years relevant experience or Master’s degree plus 8 years relevant experience or equivalent combination of education and relevant experience
• Relevant information security or product security experience with working knowledge of cryptography, Public Key Infrastructure (PKI), software security (AppSec), secure software development practices, and hardware-based security controls
• Demonstrates technical expertise and the ability to independently determine general approaches and specific solutions to technical security problems
• Demonstrates strong and effective verbal, written, and interpersonal communication skills
• Demonstrates ability to work collaboratively and professionally with others under challenging circumstances
• Must possess detailed knowledge and experience with high-level language structure in C, C++, C#, Rust, Python, and/or Java relevant to Garmin’s business needs
• Capable of mentoring junior engineer associates in security engineering practices

Garmin International is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, citizenship, sex, sexual orientation, gender identity, veteran’s status, age or disability.

This position is eligible for Garmin's benefit program. Details can be found here: Garmin Benefits