Team Leader Offensive Security

At Garmin we create products that are designed indoors for outdoor activities. We do this to enable our customers to make the most of their time spent pursuing their passions.

We are a global company with offices in the US, Europe and Asia. In these centers, we carry out the various stages of product development, from initial concept to mass production of ready-to-sell units. We embrace a vertically integrated business model with strategic design, manufacturing, distribution, sales and support centers around the world to maximize our value to customers.

Garmin Cluj is a software engineering location within GARMIN, with over 500 colleagues working on the development of products in the aviation, automotive, fitness, outdoor, and marine sectors. We create products that are engineered on the inside for life on the outside. We do this so that our customers can make the most of the time they spend pursuing their passions.

The Team Leader for Offensive Cyber Security will lead and mentor a multidisciplinary red/pentest team delivering security testing across Garmin's web applications, APIs, mobile apps, infrastructure, hardware products etc. This role involves team leadership and program ownership to proactively identify, validate and drive remediation of vulnerabilities, improve testing methodologies, and improve our security posture.

Responsibilities

• Lead and develop the offensive security team: set priorities, coach, hire, and conduct regular skills assessments; establish a documented training plan and progression paths.
• Effectively communicate with stakeholders at different levels within the organization to ensure mitigation of cyber security risks in the environment. 
• Monitor progress of the team in meeting deliverables and schedule compliance.
• Provide relevant and accurate metrics using industry and Garmin standards of cyber threats.
• Assess skillset of the cyber security team and develop/execute a training plan in accordance with industry and Garmin standards.
• Evaluate the feasibility of different strategies and provide recommendations informed by insights from subject matter experts.
• Ensure that all security testing requirements are met or exceeded.
• Provide significant contributions to defining team roadmap and priorities.
• Recommend improvements to security policies, hardening guides, and baseline configurations; track emerging threats relevant to Garmin’s ecosystem.
• Ensure testing follows legal/ethical boundaries, safe-harbor, data handling, and export controls; manage third-party/vendor assessments as needed.