Security Engineer II

Avnet; Bengaluru; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Avnet is seeking an experienced information security professional in Bengaluru, India to design and secure information systems assets. You will interface with user communities, implement security procedures, and monitor policy compliance across the organization.

The role requires 5+ years of experience, a bachelor's degree, and relevant certifications. Expect to work with leading security tools and collaborate with a global team to safeguard data and applications.

Qualifications

• Bachelor's degree or equivalent with relevant security experience.
• 5+ years in information security roles and risk management.
• Certifications such as CISSP/CASP/GIAC are favorable.
• Experience with GDPR/regulatory compliance and data protection.

Responsibilities

• Conduct security risk assessments and compliance audits.
• Develop, maintain, and publish security policies and standards.
• Ensure GDPR compliance and data protection across programs.
• Enforce security standards and monitor compliance.
• Provide guidance on information security issues to teams.

Skills

Security risk assessment

Compliance audits

Policy development

GDPR compliance

Incident response

Threat monitoring

Education

Bachelor's degree

Tools

Crowdstrike

Cribl

Netskope

ArmorCode

Job description

Job Summary

Design, implement, and ensure the safety of information systems assets, data and protect systems from intentional or inadvertent access or destruction. Interface with user communities to identify security needs and implement procedures based on findings. Communicate security policies and monitor compliance. Evaluate security level requirements

Principal Responsibilities

• Conducts security risk assessments and compliance audits and makes recommendations regarding levels of risk by identifying potential information and network security vulnerabilities.
• Develops, maintains and publishes policies and standards related to security software systems to mitigate risk and influence user behaviors.
• Implementation, administration, and compliance with all GIS data security programs and regulations including General Data Protection Regulations (GDPR)
• Enforces and monitors security related standards, procedures, techniques and guidelines.
• Provides technical guidance and consultation related to information security issues.
• Identifies intrusions into information systems and makes recommendations for improvements/changes based on findings.
• Investigates and recommends security technologies and solutions including data loss prevention, firewalls, encryption, intrusion detection, etc.
• Shares security knowledge with employees and the business.
• Manages the provisioning, de-provisioning and access levels of accounts for cybersecurity tools.
• Represents the team as a regional point of contact.
• Other duties as assigned.

Job Level Specifications

Extensive knowledge and application of principles, theories and concepts. Complete knowledge of all job functions and the broad industry best practices, techniques and standards.

Develops solutions to complex problems where analysis of situations and/or data requires in-depth evaluation of variables. Determine best approach to achieve results and provide suggestions to improve policies and procedures.

Work is performed independently and requires the exercise of judgment and discretion. Exercises considerable latitude in determining objectives and approaches to assignments. Work may be reviewed at a high level.

May represent the organization as a primary contact on assignments and/or projects. Interacts with senior professionals and management and frequently coordinates work between departments or organizations.

Actions may impact the organization. Failure to accomplish work will result in the inability to reach crucial organizational goals. Erroneous decisions may have a prolonged effect resulting in the expenditure of substantial resources.

Distinguishing Characteristics

Prior Tool Experience: Knowledge and experience with our toolset.

• Crowdstrike
• Cribl
• Netskope
• ArmorCode

Problem-Solving Ability: Demonstrated capability to address complex security issues effectively and efficiently. Ability to think critically and adapt solutions to evolving security challenges.

Communication Skills: Strong written and verbal communication skills, with the ability to convey technical information to non-technical stakeholders and produce clear, concise reports.

Team-Oriented: Collaborative mindset with the ability to work effectively within a global team and contribute to collective security goals while managing individual responsibilities.

Industry certifications: such as CISSP, CASP, or GIAC are a plus.

Relevant vendor specific certifications are a plus.

Work Experience

Typically, 5+ years with bachelor's or equivalent.

Education and Certification(s)

Bachelor's degree or equivalent experience from which comparable knowledge and job skills can be obtained.

The above statements are intended to describe the general nature and level of work being performed. They are not intended to be construed as an exhaustive list of all responsibilities, duties, and skills.