POSITION SUMMARY : Performing comprehensive penetration testing, vulnerability assessments, and risk analysis across Garmin’s global computer systems, products, and software covering web, API, infrastructure, mobile, and hardware security through ethical hacking engagements. Responsible for ensuring adherence to Garmin’s information security strategy, programs and best practice. Design, develop, and implement solutions and metrics to successfully integrate and monitor current information security and identity management systems with the existing architecture. In addition, deploy security policies, investigate and evaluate alerts for malicious file execution attempts, and design enhanced protocols aligned with protecting corporate wide production systems. The Cyber Security Engineer II will also lead root-cause analysis efforts to determine improvement opportunities when failures occur.

ESSENTIAL FUNCTIONS:Perform in-depth penetration and security assessment testing for Garmin computer systems, products, and software on a global scaleIn-depth expertise with industry trusted infrastructure and development penetration toolsIn-depth expertise with security, infrastructure, software development, and application technologiesProficiency with various methods of reconnaissance, information gathering including network analysis, web application analysis, database analysisStrong understanding of: OWASP Top 10, SANS Top 25, CWE , CVSS scoring, threat modeling, MITRE ATT&CK; frameworkSecure coding practices and SDLCKnowledge of authentication protocols: OAuth2, JWT, SAML, Kerberos, NTLMConducts regular security audits from both a logical/theoretical standpoint and a technical/hands-on standpointProficiency with various methods of threat modeling and vulnerability assessment including vulnerability scanners, password crackers, network protocol attacksDemonstrated proficiency with either the Python, PowerShell, Bash or Ruby programming languageExpertise with industry-standard tools: Burp Suite Pro, Nmap, SQLMap, Nessus, Nuclei, Metasploit, CrackMapExec,



BloodHoundFamiliarity with reverse engineering tools or firmware analysis is a plusWillingness and capability to exceed mastery of common penetration tools toward a deeper understanding of the technology that is needed to reveal vulnerabilities that standard tool proficiency does notWillingness to learn or experience with device hacking / reverse engineering of products and devicesExecute red teaming tactics: Active Directory exploitation (Kerberoasting, AS-REP Roasting, DCSync, constrained delegation)Lateral movement, persistence, and evasionCommand and control (C2) setup.

What the candidate will do:Internal/External Network Penetration TestingCloud Penetration TestingWeb Application Security TestingAPI Security TestingMobile Application Security TestingIoT / Device Security TestingDesktop Application Security TestingRed Teaming ActivitiesDemonstrating proficiency in diverse reconnaissance and information gathering methods, including network analysis, web application analysis, and database analysis.Possessing expertise in industry-standard security best practices and utilizing multiple techniques for penetration testing.Managing vulnerabilities and effectively communicating with system owners in English, exhibiting excellent communication skills.The desired candidate will have prior experience completing security assessments and generating reports.

Other Responsibilities:Creating and developing security assessment solutionsDaily administrative tasks, reporting and communication with the relevant departments in the organizationDesigns and develops complex, integrated solutions to meet business requirements or enhance performance of Garmin’s security systemsPerforms and evaluates costs analyses and vendor comparisons from small through large scale projects to ensure cost-effective and efficient operationsMeasures feasibility of various approaches and makes recommendationsCommunicate effectively regarding system operations and environment changesAdhere to SOX, PCI,



and other regulatory requirements as dictatedUnderstands and avoids potential threats and drives counter measures for IT managed systemsEnsures that all security requirements are met or exceededProvides significant contributions to defining team roadmap and prioritiesDevelops reliable solutions to complex problems which require the regular use of ingenuity and creativityDemonstrates broad understanding of Garmin's business model, including Engineering, Operations, Finance, Sales and MarketingServes as a mentor and provides guidance to less experienced IT workersResearches new technologies and proposes cost effective solutionsProvides innovation within area of expertiseFacilitates team discussions and meetingsRecognized as an expert in assigned discipline at Garmin and applies extensive technical expertise and analysis to initiativesContributes input to broader technology solutions outside of disciplineServes as a leader of changeDemonstrates professional maturity through giving and receiving constructive feedbackConflict is addressed effectively without appreciable oversightCoordinates department level non-project changesPerform other duties as necessary

Certifications (Preferred):Must-have: OSCPNice-to-have: OSEP, OSWE, CRTP, PNPT, eWPTX, Red Team-focused certifications

EDUCATION EXPERIENCE AND SKILLS REQUIRED:Bachelor of Science Degree in Computer Science, Information Technology, Management Information Systems, Business or another relevant field AND a minimum of 6 years relevant experience OR equivalent combination of education and relevant experienceOutstanding academics with the demonstrated ability to apply learned knowledgeFluency in English is requiredDemonstrated strong and effective verbal, written, and interpersonal communication skills in a small team settingMust be team-oriented, possess a positive attitude and work well with othersDriven problem solver with proven success in solving difficult problemsExcellent time management and follow-up skillsConsistently demonstrates quality and effectiveness in work documentation and organizationMust be able to exploit vulnerabilities and provide actionable remediation recommendations beyond scanning capabilities

📌 Senior Cyber Security Engineer (Mumbai)
🏢 Garmin Hyderabad
📍 Mumbai