We are looking for a full-time Cyber Security Analyst 2 for our headquarters in the greater Kansas City area. In this role, you will perform security monitoring, conduct investigations, and develop solutions to remediate cyber threats to the Garmin IT environment. You will be responsible for providing recommendations to stakeholders on potential solutions to cybersecurity threats. A passion for learning, critical thinking, and an attitude for growth are essential for the success of this position. Other essential functions include:
Create/update analytical paths (playbooks) based on trend analysis to triage and remediate security events to improve/prevent incident response while minimizing business impact.
Provide incident reporting for internal/external cyber investigations to support business functions.
Coordinate efforts with Security Engineering Team to enforce enterprise standards, policies, and regulations.
Analyze security events - network traffic, endpoint indicators, and various log sources to identify threats, assess potential damage, and perform countermeasures while considering business risks.
Performs research on the latest threats and technological advancements in combating adversarial tactics and make recommendations on potential solutions.
Correlates incident data to identify specific vulnerabilities and make recommendations that enable expeditious remediation.
Demonstrates proficient use and knowledge of standards and procedures.
Reviews and validates security compliance reports to track business as usual and out of policy activities.
Serves as mentor to level 1 team members on the SOC, IT Operations, and Service Desk.
Demonstrates proficient use and knowledge of standards and procedures.
Ability to support Garmin’s Security Operations Center as needed to support 24/7 coverage. Weekend and/or night coverage may be required.
EDUCATION EXPERIENCE AND SKILLS REQUIRED:
Bachelor of Science Degree in Computer Science, Information Technology, Management Information Systems, or another relevant field AND a minimum of 3 years IT Security experience OR equivalent combination of education and experience.
Possess analytical skills and strong ability to maintain composure and remain diplomatic under a highly stressful situation
Demonstrated experience and knowledge of security-related technologies such as intrusion prevention and detection systems, web proxies, SIEM, SOAR, EDR, firewalls, web application scanner, vulnerability scanners and forensics tools
Experience with system hardening techniques and methodologies.
Familiarity with MITRE ATT&CK Framework and Cyber Kill Chain methodology.
Strong multitasking skills to be able to effectively manage multiple activities, including cross-team dependent activities simultaneously.
Demonstrated effective verbal, written, and interpersonal communication skills.
Must be team-oriented, possess a positive attitude, and work well with others.
Understanding of TCP/IP networking, web infrastructure applications, tools and processes used in security incident detection and response.
DESIRABLE QUALIFICATIONS:
Security + certification
Other security certifications (GCIH, GCED, CISSP)
Experience with cybersecurity policies and implementation of Risk Management Framework (RMF)
Experience with NIST 800-53 and/or NIST Cyber Security Framework (CSF)
Experience in Security Orchestration, Automation, and Response (SOAR) and Security information and event management (SIEM) Platforms
System administration experience: Windows and Linux/Unix Scripting OR development experience (Python, JavaScript, PowerShell, C#, Perl)
Garmin International is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, citizenship, sex, sexual orientation, gender identity, veteran’s status, age or disability.
