Security Engineer III

Avnet • Chandler, AZ

5d

About The Position

Designs, implements, and safeguards information systems assets and data against intentional or inadvertent access or destruction. Works with user communities to identify security needs, establish procedures, communicate security policies, monitor compliance, and evaluate security requirements.

The role designs, builds, maintains, and tunes SIEM detection logic and alerts throughout their lifecycle, coordinating with security operations, incident response, threat hunting, vulnerability management, and platform engineering. It also supports internet security capabilities through Netskope Secure Web Gateway, develops Netskope policies using CASB, and evaluates requested firewall rule changes for security risk. Participation in an on-call rotation is required, with AMER and weekend coverage approximately every six weeks.

Additional work includes security assessments and audits; developing and enforcing security policies and standards; administering data security programs and regulatory compliance, including GDPR; investigating intrusions and recommending improvements; maintaining information systems; evaluating security technologies; and managing system account provisioning and access levels. The position requires U.S. citizenship or national status, lawful permanent residency, or qualifying protected-individual status because it provides access to ITAR products.

Requirements

• Typically 5+ years of work experience with a bachelor's degree or equivalent.
• Bachelor's degree or equivalent experience that provides comparable knowledge and job skills.
• Extensive knowledge and application of principles, theories, concepts, industry best practices, techniques, and standards.
• Ability to develop solutions to complex problems through in-depth evaluation of situations and data, determine an effective approach, and suggest policy or procedure improvements.
• Ability to work independently and exercise judgment and discretion, including latitude in determining objectives and approaches to assignments.
• Ability to represent the organization as a primary contact on assignments or projects and coordinate work across departments or organizations.
• U.S. citizen or national, lawful permanent resident as defined by 8 U.S.C. 1101(a)(20), or protected individual as defined by 8 U.S.C. 1324b(a)(3), due to access to ITAR product.

Responsibilities

• Design, build, maintain, tune, validate, deploy, and retire SIEM detections and alerts for suspicious activity, policy violations, and potential security incidents.
• Manage SIEM alerts according to engineering standards for severity, ownership, routing, enrichment, and platform behavior.
• Partner with incident response, threat hunting, vulnerability management, and platform engineering teams to identify detection gaps and prioritize alerting requirements.
• Review detection effectiveness, alert volume, false-positive trends, and platform changes with security operations stakeholders.
• Support, troubleshoot, and maintain internet security capabilities through Netskope Secure Web Gateway (SWG).
• Define, build, and maintain Netskope policies through Cloud Access Security Broker (CASB).
• Evaluate the security risk of requested firewall rule changes and support firewall rule implementation in line with business response expectations.
• Participate in the team on-call rotation for applications and responsibilities, engaging tool or process owners as needed; AMER and weekend coverage is approximately every six weeks.
• Analyze security-related hardware and software at the component level, including firewalls and modems.
• Conduct security risk assessments and compliance audits, identify potential information and network security vulnerabilities, and recommend risk levels and mitigations.
• Develop, maintain, and publish security software policies and standards to mitigate risk and influence user behavior.
• Implement, administer, and ensure compliance with GIS data security programs and regulations, including GDPR.
• Enforce and monitor security standards, procedures, techniques, and guidelines.
• Provide technical guidance and consultation on information security issues.
• Identify intrusions into information systems and recommend improvements or changes based on findings.
• Implement upgrades, repairs, and modifications to information systems assets.
• Investigate and recommend security technologies and solutions, including data loss prevention, firewalls, encryption, and intrusion detection.
• Share security knowledge with employees and the business.
• Manage provisioning, de-provisioning, and access levels for accounts associated with system assets.
• Perform other duties as assigned.

Benefits

• Generous paid time off
• 401(k) and pension plan
• Paid holidays
• Family support, including paid leave, surrogacy, and adoption
• Medical, dental, vision, and life insurance
• Long-term and short-term disability insurance
• Health savings account and flexible spending account
• Education assistance
• Employee development resources
• Employee wellness, leadership development, and mentorship programs
• Flexible working arrangements
• Programs supporting employee well-being and opportunities to give back to the community

What This Job Offers

• Job Type: Full-time
• Career Level: Senior