Who We Are:
At Avnet, relationships matter. We are a global, FORTUNE ® 500 technology distributor and solutions company that delivers design, supply chain and logistics expertise to customers at every stage of a product’s lifecycle. Our employees have a front row seat to the latest innovations shaping the world we live in and the future we share. We’re driven to help our customers around the world succeed and we do so by earning the trust of some of the biggest names in technology.
Working at Avnet means being a part of a global team. We work collaboratively and with integrity, doing business the right way. For more than a century, we have partnered together to help our customers, suppliers and teammates realize the transformative possibilities of technology. Experience what’s next at Avnet!
Job Summary:
Design, implement, and ensure the safety of information systems assets, data and protect systems from intentional or inadvertent access or destruction. Interface with user communities to identify security needs and implement procedures based on findings. Communicate security policies and monitor compliance. Evaluate security level requirements
Principal Responsibilities:
SIEM Threat Detection & Alert Creation
Design, build, and maintain SIEM detection logic that identifies suspicious activity, policy violations, and potential security incidents across supported log sources.
Create and manage SIEM alerts in accordance with engineering standards for severity, ownership, routing, enrichment, and platform behavior.
Tune existing detections to reduce false positives, improve fidelity, and ensure alerts remain aligned to current threats and business priorities.
Maintain the detection engineering lifecycle from intake through development, validation, deployment, tuning, and retirement.
Partner with incident response, threat hunting, vulnerability management, and platform engineering teams to identify detection gaps and prioritize new alerting requirements.
Maintain regular engagement with security operations stakeholders to review detection effectiveness, alert volume, false positive trends, and required platform changes.
Network Security
Support, troubleshoot, and maintain internet security capabilities through Netskope Secure Web Gateway (SWG)
Define, build, and maintain Netskope policies through Cloud Access Security Broker (CASB)
Support implementation of firewall rules by evaluating security risk for all requested changes, while maintaining a short response time in line with business expectations.
On-Call
Join on-call rotation. This will be for all applications/responsibilities for the team; however, you can pull in tool/process owners as needed. AMER & Weekend coverage roughly every 6 weeks.
Other
Analyzes, at the component level (i.e., firewalls, modems, etc.), security-related hardware and software.
Conducts security risk assessments and compliance audits and makes recommendations regarding levels of risk by identifying potential information and network security vulnerabilities.
Develops, maintains and publishes policies and standards related to security software systems in order to mitigate risk and influence user behaviors.
Implementation, administration and compliance of all GIS data security programs and regulations including General Data Protection Regulations (GDPR)
Enforces and monitors security related standards, procedures, techniques and guidelines.
Provides technical guidance and consultation related to information security issues.
Identifies intrusions into information systems and makes recommendations for improvements/changes based on findings.
Implements upgrades, repairs, and modifications to information systems assets.
Investigates and recommends security technologies and solutions including data loss prevention, firewalls, encryption, intrusion detection, etc.
Shares security knowledge with employees and the business.
Manages the provisioning, de-provisioning and access levels of accounts for system…