Senior Software Engineer (Embedded Security)

OverviewWe are seeking a full-time Senior Software Engineer (Embedded Secruirty) at Garmin's Cary, North Carolina location. In this role, you will be responsible for providing technical leadership and project planning for software development for products, applications, or systems new to Garmin as an individual contributor. You will develop and maintain production embedded software and automated security test capabilities, review product designs and vulnerabilities, and support cybersecurity regulatory compliance efforts, including the European Union Cyber Resilience Act and similar initiatives. A substantial portion of this role will remain focused on hands-on software development.This position is well-suited to an experienced embedded software engineer with a strong interest in product security who wants to expand their responsibilities into security analysis, defensive testing, risk assessment, and cybersecurity regulatory compliance. Prior formal cybersecurity compliance experience is beneficial but not required.Essential FunctionsServes in a leadership capacity as an individual contributor, developing embedded software in C, C++, Python, Assembly language, or other selected languages for new and existing products, systems, and engineering toolsMay serve as a Lead Software Engineer for complex projects and reviews software architectures, modules, and systems supporting new technology or improving the capability, performance, reliability, or security of existing functionalityProvides technical ownership for selected security-critical software components, potentially including services associated with hardware roots of trust, secure elements, cryptographic functions, key management, or Trusted Execution EnvironmentsDecomposes functional, security, and regulatory requirements into well-defined engineering tasks and develops appropriate software solutions based on product architecture, operating environment, and identified risksPerforms peer technical assessments and reviews embedded software and system designs for security weaknesses, regulatory concerns, appropriate use of security controls, and sound engineering practices.Analyzes product attack surfaces, vulnerabilities, trust boundaries, and potential misuse to determine realistic impact and recommend appropriate remediation, mitigation, or risk treatment.Develops and maintains automated security, robustness, penetration, and fuzzing test capabilities for Marine products within laboratory and continuous-testing environments.Assists with cybersecurity compliance analysis, risk assessments, technical documentation, and evidence development for major regulatory initiatives such as the European Union Cyber Resilience ActParticipates in project leadership and program planning, including evaluating technical feasibility, identifying risk, setting schedules, and providing input to product development and cybersecurity plansCommunicates technical security and compliance conclusions across engineering and business organizations and constructively challenges designs, assumptions, or proposed risk decisions when the available evidence does not support themPlans and manages complex technical assignments with a high degree of independence while balancing software development, analysis, documentation, and compliance deliverablesMentors less-experienced engineers, contributes to advanced technical research, and recommends improvements to engineering and product-security processesBasic QualificationsBachelor’s Degree in Computer Science, Electrical Engineering, Computer Engineering, Software Engineering, Aerospace Engineering, Math, Physics or related field AND a minimum of 5 years relevant experience OR an equivalent combination of education and experienceExcellent academics (cumulative GPA greater than or equal to 3.0 as a general rule)Demonstrated proficiency with designing well architectured software systems and modules that support new technology or improve capability/performance of existing functionalityDemonstrated competence with researching fundamental problems and implementing appropriate algorithmic solutionsDemonstrated ability to serve as a lead software engineer for a complex software projectAbility to decompose functional requirements into well-defined tasks while balancing quality, quantity, and complexity in work outputDemonstrated capability to offer peer technical assessments in areas of expertise, new technologies and software designsMastered proficiency in writing software in C, C++, C# or Java and relevant experience and/or training in data structures or object-oriented design methodologyDemonstrated strong and effective verbal, written, and interpersonal communication skillsMust be positive, detail oriented, organized, team oriented and a driven problem solver, multi-tasker, and self-starter with the ability to prioritize and lead in a fast paced, deadline-driven environmentDesired QualificationsOutstanding academics (cumulative GPA greater than or equal to 3.5)Experience developing security-critical embedded software, privileged system services, and software associated with secure elements, hardware roots of trust, cryptographic services, key management, secure boot, secure storage, or Trusted Execution EnvironmentsExperience with embedded Linux security mechanisms, inter-process communication, privilege separation, networking protocols, and hardware-access controlExperience performing security design reviews, threat modeling, vulnerability analysis, and product-security risk assessmentsExperience developing automated security, adversarial, protocol-robustness, penetration, and fuzzing tests for embedded and network-connected productsExperience with Python for test automation, analysis tools, and engineering infrastructureFamiliarity with software composition analysis, software bills of materials, open-source vulnerability management, and cybersecurity regulations and standards applicable to connected productsExperience working across multiple engineering organizations and within a regulated, safety-related, high-reliability, and process-disciplined product environment.Garmin International is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, citizenship, sex, sexual orientation, gender identity, veteran’s status, age or disability.This position is eligible for Garmin's benefit program. Details can be found here: Garmin Benefits