Who We Are
At Avnet, relationships matter. We are a global, FORTUNE® 500 technology distributor and solutions company that delivers design, supply chain and logistics expertise to customers at every stage of a product's lifecycle.
Job Summary
Design, implement, and ensure the safety of information systems assets, data and protect systems from intentional or inadvertent access or destruction. Interface with user communities to identify security needs and implement procedures based on findings. Communicate security policies and monitor compliance. Evaluate security level requirements.
Principal Responsibilities
SIEM Threat Detection & Alert Creation
•Design, build, and maintain SIEM detection logic that identifies suspicious activity, policy violations, and potential security incidents across supported log sources.
•Create and manage SIEM alerts in accordance with engineering standards for severity, ownership, routing, enrichment, and platform behavior.
•Tune existing detections to reduce false positives, improve fidelity, and ensure alerts remain aligned to current threats and business priorities.
•Maintain the detection engineering lifecycle from intake through development, validation, deployment, tuning, and retirement.
•Partner with incident response, threat hunting, vulnerability management, and platform engineering teams to identify detection gaps and prioritize new alerting requirements.
•Maintain regular engagement with security operations stakeholders to review detection effectiveness, alert volume, false positive trends, and required platform changes.
Network Security
•Support, troubleshoot, and maintain internet security capabilities through Netskope Secure Web Gateway (SWG).
•Define, build, and maintain Netskope policies through Cloud Access Security Broker (CASB).
•Support implementation of firewall rules by evaluating security risk for all requested changes, while maintaining a short response time in line with business expectations.
On-Call
•Join on-call rotation. This will be for all applications/responsibilities for the team; however, you can pull in tool/process owners as needed. AMER & Weekend coverage roughly every 6 weeks.
Other
•Analyzes, at the component level (i.e., firewalls, modems, etc.), security-related hardware and software.
•Conducts security risk assessments and compliance audits and makes recommendations regarding levels of risk by identifying potential information and network security vulnerabilities.
•Develops, maintains and publishes policies and standards related to security software systems in order to mitigate risk and influence user behaviors.
•Implementation, administration and compliance of all GIS data security programs and regulations including General Data Protection Regulations (GDPR).
•Enforces and monitors security related standards, procedures, techniques and guidelines.
•Provides technical guidance and consultation related to information security issues.
•Identifies intrusions into information systems and makes recommendations for improvements/changes based on findings.
•Implements upgrades, repairs, and modifications to information systems assets.
•Investigates and recommends security technologies and solutions including data loss prevention, firewalls, encryption, intrusion detection, etc.
•Shares security knowledge with employees and the business.
•Manages the provisioning, de-provisioning and access levels of accounts for system assets.
•Other duties as assigned.
Job Level Specifications
•Extensive knowledge and application of principles, theories and concepts. Complete knowledge of all job functions and the broad industry best practices, techniques and standards.
•Develops solutions to complex problems where analysis of situations and/or data requires in-depth evaluation of variables. Determine best approach to achieve results and provide suggestions to improve policies and procedures.
•Work is performed independently and requires the exercise of judgment and discretion. Exercises considerable latitude in determining objectives and approaches to assignments. Work may be reviewed at a high-level.
•May represent the organization as a primary contact on assignments and/or projects. Interacts with senior professionals and management and frequently coordinates work between departments or organizations.
•Actions may impact the organization. Failure to accomplish work will result in the inability to reach crucial organizational goals. Erroneous decisions may have a prolonged effect resulting in the expenditure of substantial resources.
Work Experience
•Typically 5+ years with bachelor's or equivalent.
Education and Certification(s)
•Bachelor's degree or equivalent experience from which comparable knowledge and job skills can be obtained.
What We Offer
Our total rewards strategy supports Avnet's ability to attract, engage, develop, and reward our employees, while promoting a diverse and inclusive environment.
•Generous Paid Time Off
•401K and Pension Plan
•Paid Holidays
•Family Support (Paid Leave, Surrogacy, Adoption)
•Medical, Dental, Vision, and Life Insurance
•Long-term and Short-term Disability Insurance
•Health Savings Account / Flexible Spending Account
•Education Assistance
•Employee Development Resources
•Employee Wellness, Leadership Development and Mentorship Programs
Benefits listed above may vary depending on the nature of your employment with Avnet.
This position will have access to ITAR product and therefore be authorized to access product. This position requires the employee to be a U.S. Citizen or National, or a lawful permanent resident as defined by 8 U.S.C. 1101(a)(20), or a protected individual as defined by 8 U.S.C. 1324b(a)(3).
