Offensive Cyber Security Manager - Garmin International, Inc.

We are seeking a full-time Manager Cyber Security in our Olathe, KS location. In this role, you will be responsible for leading and executing proactive offensive security strategies, including penetration testing, red teaming, and advanced threat simulations across global networks and infrastructure. This role focuses on identifying vulnerabilities and improving the Garmin’s security posture by simulating real-world attacks, providing actionable recommendations, and collaborating with various teams and stakeholders to remediate risk. The position requires a deep understanding of cyber threats, offensive security techniques, and global compliance and regulatory requirements

Essential Functions

• Lead and direct team responsible for Garmin’s Cyber Security technology worldwide.
• Establish and execute technology strategy and vision for the Cyber Security team.
• Work closely with Security Operations Center to effectively alert SOC personnel.
• Manage team priorities and delivery of Cyber Security projects.
• Manage internal Cyber Security staff.
• Continuously define, document and refine Cyber Security workflows to ensure continuity for customer requirements and priorities
• Drive offensive operations at scale, grows the value delivered to defensive security team, security leadership, and business executives.
• Lead identification of unknown vulnerabilities that can be used as part of operational objectives and improve adversary emulation accuracy for Garmin products/applications.
• Display proficiency and technical knowledge of cybersecurity pertaining to IT devices, threats, web and mobile applications; identify weak spots in systems’ defenses vulnerable to attackers.
• Provide appropriate level of guidance and direction with vendors to assist in problem statements or requirements for Cyber Security.
• Make suggestions on security policy improvements and enhance methodology material.
• Effectively communicate with stakeholders at all levels to mitigate cyber security risks in the environment.
• Craft high impact Offensive Operations that effectively assess runtime defenses using quality threat intelligence and adversarial experience.
• Provide relevant and accurate metrics using industry and Garmin standards of cyber threats
• Guide, develop, document and assess pen testing in the response to incidents against the NIST framework to provide repeatable and measurable workflow
• Assess technical skillset of the cyber security team and develop/ execute a training plain in accordance with industry and Garmin standards
• Adhere to SOX, PCI, and other regulatory requirements as dictated
• Demonstrate broad understanding of Garmin's business model, including Engineering, Operations, Finance, Sales and Marketing
• Understand and avoid potential threats and drive counter measures for IT managed systems
• Define, document, and follow a structure process to conducting comprehensive ethical hacking assessments.
• Develop and maintain a long-term strategic plan based on operational lessons learned and Threat Intelligence inputs
• Provides innovation within area of expertise
• Recognized as an expert in assigned discipline at Garmin and applies extensive technical expertise and analysis to initiatives
• Pinpoint ways that attackers could exploit weaknesses in IT/security systems

Basic Qualifications

• Bachelor’s Degree in Management Information Systems, Computer Science, or another technical related field AND a minimum of 7 years relevant experience in cyber security, as well as 2 years of leadership experience
• Must demonstrate proficient and effective leadership skills with the ability to lead a team, including in daily use of considerable discretion and judgement
• Demonstrated strong and effective verbal, written, and interpersonal communication skills, with experience in all at the executive level
• Ability to prioritize/multi-task in a flexible, fast paced and challenging environment as a driven problem solver with proven success in solving difficult problems with excellent time management/follow-up skills
• Consistently demonstrates quality and effectiveness in work documentation and organization
• Highly proficient in anti-virus/ anti-malware, endpoint detection and response, perimeter, event logs and other security tools

Desired Qualifications

• Ability to take ownership in completing assigned tasks
• Self-motivator with desire to grow and seek challenges
• Strong attention to accuracy and detail
• Relevant Cyber Security certifications, CISSP, CISM, etc.

Garmin International is an equal opportunity employer.  Qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, citizenship, sex, sexual orientation, gender identity, veteran’s status, age or disability.

This position is eligible for Garmin's benefit program. Details can be found here: Garmin Benefits