Position : * Infrastructure Security Engineer *Job Description : * Arrow Electronics, Inc. a Fortune 150 company with global headquarters in Denver - helps the world’s best technology companies think Five Years Out, working together to continually innovate the next big thing .

We are a global provider of technology products, services and solutions, with 2020 sales of over $30 billion.This position will perform a combination of security design, development, and implementation work, as well as security testing and implementation of new products or enhancements to current products.

You will be responsible for the support of the production environment which ensures the appropriate security policies and practices are implemented and enforced.

Additionally, you will be the technical SME security resource to multiple Arrow teams for functionality, integration and installation related questions on all infrastructure maintenance and development questions.

• What You'll Be Doing : Design, configure, implement, and maintain all security platforms and their associated software : firewalls, intrusion detection / intrusion prevention, anti-virus, URL Filtering.
• Design, Build, Maintain integration of Automation tools within Environment* Design, review and ongoing assessment of firewall, intrusion detection / intrusion prevention, VPN, IPsec, SSL, application control, Load Balancer, DNS and other network component policies.
• Daily triage and update / resolution of tickets generated by CRM ticketing system and respond to inbound phone and electronic requests for technical assistance.
• Ensure network security best practices are implemented through auditing : firewall configurations, load balancer configuration, DDI, NAC, change control, and monitoring.
• Follow project management methodology and demonstrate best practices in network documentation as required* Manage situations in a professional and courteous business manner with an emphasis on customer satisfaction, while timely keeping the customer abreast of expectations, problem status and completion.
• Liaise between engineering and other departments on security related items.*
• Other duties as assigned.*What We're Looking For : Knowledge of security network devices (Firewalls, Load Balancers, DDI Solutions, NAC Solutions) and other security networking hardware / software tools.
• Knowledge of Private Cloud based secure deployments (Azure) as well as Cloud based application security (Office 365, Teams, Cloud based DNS).
• Knowledge of Network Route and Switch Protocols (BGP, OSPF, Spanning Tree, and VPC ) on associated vendor platforms (Cisco, Juniper)* Knowledge of Scripting / Automation Languages (Ansible, Python, Bash)* Strong understanding of TCP / IP, subnetting, routing, access control lists, IPsec VPN, NAT and network traffic analysis.
• Demonstrated understanding of information security concepts, standards, practices, including but not limited to firewalls, intrusion prevention and detection, TCP / IP and related protocols, device monitoring and log management and event monitoring / reporting
• Experience in LAN and WAN technologies, network design, network management etc.* Strong organizational skill and be able to attend to and prioritize projects.
• Demonstrable analytical and technical aptitudes with focus on identity and alleviating the root cause of the issue; solves the whole problem.
• Proven ability to thrive and respond to frequent demands of multiple constituents, both internal and external, in a customer centric manner and high demand environment.
• Bonus Skills : Wireless security, 2 factor authentication support experience, Radius, Tacacs+, Unix Linux based systems, 802.
• 1x experienceExperience / EducationTypically requires a minimum of 10 years of related experience with a 4 year degree; or 8 years and an advanced degree;

or equivalent experience. Qualifications* Minimum three-year hands-on experience with Firewalls. Preferred Palo Alto or Fortinet* Preferred professional certification include : PCNSE, ACE, CCNP, CISSP, F5-CTS, F5-CSE* Minimum of five years’ experience with information technology.

Minimum of four years’ experience with information technology security.*What’s In It For You*At Arrow, we recognize that financial rewards and great benefits are important aspects of an ideal job.

That’s why we offer competitive financial compensation, including various compensation plans, and a solid benefits package.

Medical, Dental, Vision Insurance* 401k, With Matching Contributions* Generous Paid Time Off* Health Savings Account (HSA) / Health Reimbursement Account (HRA) Options* Growth Opportunities* Short-Term / Long-Term Disability Insurance* Deeply discounted RTD Passes, with convenient office location off RTD Light Rail (Dry Creek Exit) *Annual Hiring Range / Hourly Rate : * $130,500.

00 - $159,500.00Actual compensation offer to candidate may vary from posted hiring range based upon geographic location, work experience, education, and / or skill level.

The pay ratio between base pay and target incentive (if applicable) will be finalized at offer. *Location : * US-CO-Colorado (Remote Employees) *Time Type : * Full time *Job Category : * Information Technology *EEO Statement : * Arrow is an equal opportunity employer.

All applicants will be considered for employment without attention to race, color, religion, gender, age, sexual orientation, gender identity, national origin, veteran or disability status. (Arrow EEO / AAP policy) (

• Report directly to the Information Security Officer on the status of security plan implementation and matters involving potential or actual breaches of data security.
• Consult with legal, compliance, executive leadership, and other teams to provide oversight of policies, standards, procedures and best practices related to information security.
• Support the risk management program with internal risk and vulnerability assessments, overseeing third party risk assessment processes, participating in security audits, recommending remediation or mitigation solutions, and following up on recommendations.
• Manage and support the data storage and disaster recovery team.
• Consult with participating business units to develop and maintain formalized disaster recovery plans to ensure they adequately reflect the system and facilities needs under the administrator's responsibility.
• Provide strategic risk guidance for IT projects, including evaluation and recommendation of technical controls.
• Work within cross-functional teams to develop and deliver secure solutions as well as ensure appropriate administrative, technical, and physical safeguards to ensure security of systems and information.
• Lead and / or participates in various steering committees and other groups as appropriate.
• Manage the security team that is responsible for the detection, monitoring, analysis, and resolution of security incidents, providing containment recommendations and for tuning systems to improve security.
• Support and development of the information security, training awareness, disaster recovery and incident response programs for Harris Corporate and its business units as appropriate to meet business and regular.
• Develop and maintain policy and procedures to support the information security program to ensure the confidentiality, integrity, and availability of Harris systems.
• Work with the IT team to coordinate organizational requirements, alignment and solution delivery.
• Research, recommend, and oversee the implementation of solutions within the Harris network to improve the overall security posture.
• Supervise staff as assigned in the performance of the job duties as well as developing talent for long term success.
• Establish metrics and reporting framework to measure the efficiency, effectiveness, and maturity level of the program.
• Ability to work with diverse groups of people; effective oral and written communication skills.
• Perform other duties comparable to the above, as the above duties describe only the typical, primary features of the job.

Summary Job Purpose :

To provide the most responsive, knowledgeable and courteous service by protecting not only the property but, also the safety of the guests and employees through observing, reporting and taking action through notifying and / or dispatching appropriate personnel.

Education :

Must be computer literate with Windows and AS400 experience. Must have knowledge of locations on GSR property (inside and outside of building).

Licenses / Certificates :

Ability to obtain / renew all government required licenses or certification (i.e. : Gaming Registration). Must be able to complete required four-week training for the post and pass written exam.

Basic Competencies and Abilities :

Ability to act independently while drawing conclusions from oral testimonies, written and computer generated materials.

Ability to operate personal computer to access & input information using Microsoft Word, Excel, Metasys, AS400, any other systems as required to assist guests and other personnel.

Ability to prioritize calls regarding Life Safety and the protection of the property.

Ability to be trained and certified in first aid / CPR / AED.

Ability to provide clear direction, instruction and guidance to guests / employees. Must be able to listen and respond to all inquiries in a positive and professional manner.

Ability to collect accurate information and solve customer / employee concerns promptly and efficiently. Maintain all documentation pertinent to Security operations.

i.e. : Dispatch Activity Log, alarm forms)

Ability to make decisions and take action based on experience and good judgement, and to deal with internal / external customers, some of whom will require patience, tact and diplomacy.

Ability to read, write, speak and understand the English language in order to complete reports, correspondence and communicate with guests, employees and supervisors.

Ability to remain alert throughout the duration of the shift and remain calm during emergency situations.

Ability to operate in a confined space (i.e. Central Dispatch Center). Ability to work in unfavorable conditions which can occasionally be hot or cold.

Ability to operate multi-line telephones to conduct GSR / Life Safety business.

Ability to respond to multiple radio frequencies to conduct GSR business.

Ability to comprehend and follow written and / or verbal instructions from supervisors / management / or proper personnel.

Must maintain attendance / tardiness in conformance with GSR standards.

Ability to maintain a neat, clean and well-groomed appearance.

Ability to work with interruptions.

Essential Job Functions :

Listen and respond to guest inquiries using a positive, clear speaking voice. Answer questions and offer assistance to provide guest satisfaction.

Relay accurate information to guests regarding hours of operation, Hotel services, directions to local attractions or function rooms, car rentals, airline shuttle service, etc.

Serve and promote a safe environment for hotel guests and employees.

Respond in a calm demeanor to any / all emergency situations that may arise, i.e., bomb threats, medicals, deaths, domestic disturbance, etc.

Monitor Surveillance cameras and computer systems on a continual basis, assisting guests / employees whenever needed and securing the hotel property against loss and / or damage.

At all times the dispatcher will handle him / herself in a calm, professional and courteous manner to guests, co-workers, employees and individuals while on the property.

Address any problem and / or incident on property to the supervisor during the tour of duty.

Be observant in all areas inside / outside of the hotel for safety concerns or suspicious circumstances by using cameras and while not in the Central Dispatch Center.

Use good judgment, reason and a calm demeanor when speaking to a disgruntled individual over the telephone and dispatch appropriate level of response.

In the event of an emergency, or similar situation, support Shift Supervisor in taking control and instructing fellow co-workers, employees and guests as to the best course of action to take.

Good communications skills and professionalism are required when dealing, and cooperating with outside agencies such as Police Officials, Fire Department, FBI, Secret Service and Governmental Officials.

Grasp, lift, move, carry and / or push materials, supplies, etc., weighing up to 50 lbs., on a regular basis, or up to 75 lbs frequently.

Bend, stoop, reach (above & below shoulder level), kneel, climb, squat, twist (at the neck & waist) and sit, walk, and / or stand (depending on posting requirements) between 6-8 hours, or for duration of shift.

Simple / power grasping, as well as fine hand manipulation and repetitive use of the hands is required to complete the essential functions of the position.

Due to the cyclical nature of the hospitality industry, employees may be required to work varying schedules that reflect the business needs of GSR.

Comply with GSR rules and regulations for the safe and efficient operation of GSR facilities.

Periodic Job Functions :

In addition to performance of essential functions, this position may be required to perform a combination of supportive functions to be determined by the supervisor and / or proper personnel based upon the particular needs of GSR.

Attend and participate in meetings in order to be informed of new rules, regulations and procedures and to discuss scheduling and / or other concerns of GSR and / or department.

Safety & Regulations :

Provide a safe environment for customers and employees. Report emergencies to proper authorities.

Report all suspicious persons or activities and hazardous conditions to supervisor, Director, or other safety personnel;

whether witnessed on camera or reported to Dispatcher by personnel in the field.

Provide instruction and / or guidance for guest / employee safety in fire / emergency situations.

Abide by all GSR Policies, Procedures and guidelines.

Abide by all State, federal and corporate liquor regulations pertaining to alcoholic beverage service to minors and intoxicated guests.

Abide by all State and corporate regulations pertaining to the presence of minors in gaming areas.

Other duties as assigned within the scope of this job description

About Us Maxana was founded in 2019 and our mission is to enhance and improve the world ofwork, enable the art of the possible, and make positive change to transform the planet andpeople's lives.

Maxana helps transform companies and customer lives through cutting edge engagementsin Green Tech, Industrial Internet of Things (IIoT) and critical Digital Initiatives that make areal difference for our customers.

Our unique business model delivers partner and internalexecution team seamlessly providing exceptional value, technology leadership, andprogram expertise every time.

Maxana brings both a fundamental architectural approach with hands on tech andproblem solving to every engagement. Maxana’s World Class Professional Servicestranscend traditional Big Firm consulting and professional services models by bringing theright talent to engagements with no bait and switch.

From full turnkey CTO in a BoxSolution Services with leading CTOs, Architects, and Application / Platform developmentteams, to our ServiceNow Solutions, Maxana enables your company to make the most ofyour most critical Transformation investments.

Maxana brings both Vertical market expertise in the areas of Utilities and Financial Serviceswith a deep bench of technology subject matter experts and leaders in the area of cuttingedge Blockchain use cases, Industrial Internet of Things, Green Grid architecture, andDigital Banking and Omni-channel.

Maxana is seeking a Security Engineer to join a growing Cyber Security team. In this role, we’re looking for an individual who is passionate about Cyber security.

This is a great opportunity for someone to be part of the building Cyber security program from the ground up with a vision to build Cyber resilient organizations.

This position is the most pivotal and highly visible to create an impact and continued growth, as it is responsible for the design and implementation of various security controls and collaboration across the organization.

This role is a mix of Security Architect, Engineering and supporting Security Operations as required. This role requires a high degree of ownership, velocity, and aptitude for independently leading Cyber Security projects and driving the entire lifecycle of the project.

You will have broad latitude to work independently and coordinate and interact with a broad group of bright and energetic people throughout the company.

Core Responsibilities

• Responsible for multi-disciplinary domains of the Cyber security program, such as Threat & vulnerability management, End point security, SIEM solution, Cloud Security & Data security.
• Lead multiple Cyber security projects to evaluate, implement, manage, and build operational efficiency.
• Strengthen Nave’s security posture through offensive security assessments including the identification and exploitation of vulnerabilities across the system
• Improve Security operational efficiency by building and evaluating workflow processes, procedures, checklists, automation, and tooling
• Build automation to respond commonly anticipated Security events and mature the respond, recovery function for Cyber security.
• Develop tools, technique, and processes to continuously find gaps and improve security posture
• Work in collaboration with engineering team and IT team to formulate mitigation solution for various threats and vulnerabilities.
• Develop various use case for security monitoring & playbooks to mitigate those threats
• Conduct threat analysis by means of active penetration testing against web applications,
• APIs and Infrastructure.
• Build & manage relationship with SOC, define escalation path, playbooks & ongoing fine tuning of SIEM solutions
• Review, Analyze and mitigate SAST, DAST, SCA, CSPM and penetration test results in Collaboration with the developers for security remediations to close identified gaps and validate the remediations.
• Assist and execute technical security assessments to identify risk, likelihood and impact an attacker may have on the System due to weak or missing controls
• Provides 24x7 on-call support on rotation for escalated security incidents

Skills

• Hands on experience with penetration testing, red / blue / purple team exercise
• Hands on experience on managing security tools such as End Point security, EDR, SIEM,
• Threat intelligence & hunting platform, vulnerability management platform, SOAR & Cloud security.
• Hands on experience with scripting / programming of Python, JSON, PowerShell and various SIEM Language.
• Solid understanding of modern web application technologies, APIs, Cloud and architectures.
• Strong ability to identify and exploit security gaps / vulnerabilities on endpoint devices, applications, and networks
• Solid understanding of MITER ATT&CK framework and all phases of adversary emulation operations including reconnaissance, social engineering, exploitation, post-exploitation, covert techniques, lateral movement, and data exfiltration
• Good understanding of security frameworks such as NIST CSF, FFIEC, OWASP Top 10, and CIS 18
• Must be independent and able to influence the security decision within the organizations
• Team player with interpersonal, collaborative and consultative skills
• Excellent and professional communication skills (written and verbal) with an ability to articulate complex topics in a clear and concise manner

Qualifications

• 8+ years of core experience in the area of Cyber security and Cloud security
• Degree in Computer science or Cyber security or equivalent industry experience
• Must be Certified at least one OSCP, CEH, GPEN certification in Cloud security, CISSP, CCSP or any security related certification would be great plus

This is a remote position.

Position Purpose

This position is responsible for ensuring the security, safety, and well-being of all Renown Health Property and individuals there within.

Performance includes demonstration of the following leadership competencies : demonstrates ownership, creates improvement and innovation, creates a work environment marked by pride / joy, builds bridges / collaborates, adaptability, integrity and trust.

Reporting to an on-duty Security supervisor or Senior Security Officer, the Security Officer (SO) is responsible for ensuring a secure environment for employees, patients and visitors at all Renown Health facilities by providing service of the highest quality, which optimizes our patient’s healthcare experience.

Nature and Scope

This position is responsible for ensuring a secure environment for patients, staff and visitors at all Renown Health properties.

This will be done in a manner consistent with Renown

Health’s values and goals.

The incumbent :

Works to build a cooperative and proactive department using current law enforcement, security and crime prevention technologies.

Is responsible for responding to the needs and inquiries of the Renown Health community, and strives for a safe and secure environment for patients, staff and visitors.

Supports and creates a community based model and sets standards

for cross-disciplinary work to improve customer service.

Is responsible for responding to all calls assigned and ensuring the making of reports and maintaining records.

Is responsible to maintain patient confidentiality and inform Security Officer in charge of all instances of necessary statutory reporting to state and federal agencies.

Is responsible to promote crime prevention and utilize proactive techniques to reduce crime, theft and loss of Renown Health property.

Will be required to administer patient restraints when authorization is provided by an approved medical practitioner.

Will be required to be cross-trained as a security dispatcher.

Will be required to detain individuals subject to arrest that have committed a crime and are an immediate threat. Security Officers may be required to appear in court and must be up to date on all State of Nevada criminal statutes and

procedures.

Maintain the ability to interact with Reno Police Department, Washoe County Sheriff’s Department, Nevada State Police, University of Nevada Police, Department of Public Health Investigations, and other security, federal and out of state law enforcement agencies.

Must be able to work all shifts and during times of emergency be able to respond to Renown Health when called.

Overtime may be required when necessary to ensure minimum staffing levels.

Provide all other duties as assigned.

Must be able to successfully complete all required departmental training programs within 90 days including, but not limited to, handcuffing certification, Oleoresin Capsicum (OC Spay) Certification, IAHSS Basic Security Officer, and Non-violent deescalation and intervention certification.

This position will also be eligible to attend higher levels of training in preparation for career advancement and position specialization.

Such trainings may include, but are not limited to, Field Training Officer, IAHSS Advanced Security Officer and Taser End User Certification.

This position does not provide patient care.

Disclaimer

The foregoing description is not intended and should not be construed to be an exhaustive list of all responsibilities, skills and efforts or work conditions associated with the job.

It is intended to be an accurate reflection of the general nature and level of the job.

Minimum Qualifications

Requirements - Required and / or Preferred

Name

Description

Education :

Must have working-level knowledge of the English language, including reading, writing and speaking English. A high school degree preferred;

a college degree in Criminal Justice or other related field preferred.

Experience :

An understanding of police and security principles and 1-year experience in law enforcement / security is desirable. Healthcare Security experience is desirable.

High level of motivation and creativity in problem solving preferred. Excellent customer service skills preferred. Strong team building skills and self-motivation are preferred.

License(s) :

Valid State of Nevada or California driver's license and ability to pass Renown Health's Department of Motor Vehicle Report criteria upon hire.

Certification(s) :

AHA Heart Saver certification is required within 90 days of hire. IAHSS Basic Security Officer is required within 90 days of hire.

Department approved handcuffing certification is required within 90 days of hire. Department approved OC spray certification is required within 90 days of hire.

Department approved de-escalation training certification is required within 90 days of hire.

Computer / Typing :

Strong written, verbal and computer skills are desirable. Must possess, or be able to obtain within 90 days, the computers skills necessary to complete online learning requirements for job-specific competencies, access online forms and policies, complete online benefits enrollment, etc.

PI219200729