Security Engineer

AVNET India Pvt Ltd; Bengaluru; On-site; INR 2,500,000 - 4,500,000; Full time

Job summary

AVNET India Pvt Ltd seeks a Security Engineer II to design, implement, and safeguard information systems, data, and assets. The role interfaces with user communities to identify security needs and enforces security policies and monitoring of compliance.

The candidate will lead risk assessments, develop security standards, and guide incident response, while overseeing access provisioning for cybersecurity tools and acting as a regional security focal point.

Qualifications

• Typically 5+ years of security experience with a related degree.
• Experience designing and implementing security controls.
• Familiarity with GDPR compliance.

Responsibilities

• Conduct security risk assessments and audits.
• Develop and publish security policies and standards.
• Ensure GDPR compliance across data programs.
• Enforce security standards and procedures.
• Provide guidance on information security issues.
• Identify intrusions and recommend improvements.
• Evaluate security technologies and solutions.
• Share security knowledge across the organization.
• Manage access provisioning for cybersecurity tools.
• Serve as regional security focal point.

Skills

Security risk assessment

Compliance auditing

Policy development

Information security

Communication skills

Team collaboration

Education

Bachelor's degree or equivalent

Tools

CrowdStrike

Cribl

Netskope

ArmorCode

Job description

Security Engineer II Job Summary

Design, implement, and ensure the safety of information systems assets, data and protect systems from intentional or inadvertent access or destruction. Interface with user communities to identify security needs and implement procedures based on findings. Communicate security policies and monitor compliance. Evaluate security level requirements

Principal Responsibilities

• Conducts security risk assessments and compliance audits and makes recommendations regarding levels of risk by identifying potential information and network security vulnerabilities.


• Develops, maintains and publishes policies and standards related to security software systems to mitigate risk and influence user behaviors.


• Implementation, administration, and compliance with all GIS data security programs and regulations including General Data Protection Regulations (GDPR)


• Enforces and monitors security related standards, procedures, techniques and guidelines.


• Provides technical guidance and consultation related to information security issues.


• Identifies intrusions into information systems and makes recommendations for improvements/changes based on findings.


• Investigates and recommends security technologies and solutions including data loss prevention, firewalls, encryption, intrusion detection, etc.


• Shares security knowledge with employees and the business.


• Manages the provisioning, de-provisioning and access levels of accounts for cybersecurity tools.


• Represents the team as a regional point of contact.


• Other duties as assigned.

Job Level Specifications

Extensive knowledge and application of principles, theories and concepts. Complete knowledge of all job functions and the broad industry best practices, techniques and standards. Develops solutions to complex problems where analysis of situations and/or data requires in-depth evaluation of variables. Determine best approach to achieve results and provide suggestions to improve policies and procedures. Work is performed independently and requires the exercise of judgment and discretion. Exercises considerable latitude in determining objectives and approaches to assignments. Work may be reviewed at a high level. May represent the organization as a primary contact on assignments and/or projects. Interacts with senior professionals and management and frequently coordinates work between departments or organizations. Actions may impact the organization. Failure to accomplish work will result in the inability to reach crucial organizational goals. Erroneous decisions may have a prolonged effect resulting in the expenditure of substantial resources.

Distinguishing Characteristics Prior Tool Experience

Knowledge and experience with our toolset. Crowdstrike Cribl Netskope ArmorCode Problem-Solving Ability: Demonstrated capability to address complex security issues effectively and efficiently. Ability to think critically and adapt solutions to evolving security challenges. Communication Skills: Strong written and verbal communication skills, with the ability to convey technical information to non-technical stakeholders and produce clear, concise reports. Team-Oriented: Collaborative mindset with the ability to work effectively within a global team and contribute to collective security goals while managing individual responsibilities. Industry certifications: such as CISSP, CASP, or GIAC are a plus. Relevant vendor specific certifications are a plus.

Work Experience

Typically, 5+ years with bachelor's or equivalent.

Education and Certification(s)

Bachelor's degree or equivalent experience from which comparable knowledge and job skills can be obtained.

Experience Level

Mid Level