Security Engineer III

Avnet•Chandler, AZ

About The Position

The Security Engineer III designs, implements, and safeguards information systems, data, and other system assets against intentional or inadvertent access or destruction. The role works with user communities to identify security needs, establish procedures, communicate policies, monitor compliance, and evaluate security requirements. The engineer owns SIEM detection engineering across supported log sources, including designing, building, maintaining, tuning, validating, deploying, and retiring detections and alerts. The role collaborates with security operations, incident response, threat hunting, vulnerability management, and platform engineering to address detection gaps and review alert effectiveness. It also supports internet security through Netskope Secure Web Gateway and CASB, and evaluates security risks for requested firewall rule changes. The position participates in an on-call rotation, including AMER and weekend coverage roughly every six weeks. Additional work includes security assessments and audits, security policy and standards development, compliance with applicable data security programs and regulations including GDPR, intrusion investigation, security technology recommendations, system upgrades and modifications, and account provisioning and access management. The position requires U.S. citizenship or national status, lawful permanent residency, or protected-individual status as defined in the posting because it will have access to ITAR product.

Requirements

Typically 5 or more years of work experience with a bachelor's degree or equivalent.
Bachelor's degree or equivalent experience providing comparable knowledge and job skills.
Must be a U.S. Citizen or National, lawful permanent resident as defined by 8 U.S.C. 1101(a)(20), or a protected individual as defined by 8 U.S.C. 1324b(a)(3), because the role has access to ITAR product.

Responsibilities

Design, build, and maintain SIEM detection logic to identify suspicious activity, policy violations, and potential security incidents across supported log sources.
Create and manage SIEM alerts according to engineering standards for severity, ownership, routing, enrichment, and platform behavior.
Tune detections to reduce false positives, improve fidelity, and align alerts with current threats and business priorities.
Manage the detection engineering lifecycle from intake through development, validation, deployment, tuning, and retirement.
Partner with incident response, threat hunting, vulnerability management, and platform engineering teams to identify detection gaps and prioritize alerting requirements.
Engage with security operations stakeholders to review detection effectiveness, alert volume, false-positive trends, and platform changes.
Support, troubleshoot, and maintain internet security capabilities through Netskope Secure Web Gateway.
Define, build, and maintain Netskope policies through CASB.
Evaluate security risks for requested firewall rule changes and support firewall rule implementation while meeting business response expectations.
Participate in the on-call rotation for team applications and responsibilities, including AMER and weekend coverage roughly every six weeks; involve tool or process owners as needed.
Analyze security-related hardware and software at the component level, including firewalls and modems.
Conduct security risk assessments and compliance audits, identify potential information and network security vulnerabilities, and recommend risk levels and mitigations.
Develop, maintain, and publish security software system policies and standards to mitigate risk and influence user behavior.
Implement, administer, and ensure compliance with GIS data security programs and regulations, including GDPR.
Enforce and monitor security standards, procedures, techniques, and guidelines.
Provide technical guidance and consultation on information security issues.
Identify intrusions into information systems and recommend improvements or changes based on findings.
Implement upgrades, repairs, and modifications to information systems assets.
Investigate and recommend security technologies and solutions, including data loss prevention, firewalls, encryption, and intrusion detection.
Share security knowledge with employees and the business.
Manage provisioning, de-provisioning, and access levels for system asset accounts.
Perform other duties as assigned.