About This Role
About Avnet
Avnet is a global distributor of electronic components, computer products, and technology services. Founded in 1921 in New York City, the company has grown from a small surplus radio parts dealer into one of the largest distributors in North America, serving industrial and military customers. Avnet's product offerings include a wide range of electronic components such as capacitors, switches, and connectors, as well as semiconductor distribution featuring microprocessors from major manufacturers like Intel and AMD. The company also provides custom computing solutions and technology services, including design, distribution, and logistics support. Avnet serves a diverse customer base, including manufacturers, resellers, and end users across various sectors like automotive, telecommunications, and consumer electronics. With a strong international presence, Avnet continues to play a vital role in the technology supply chain.
Security at Avnet
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
- Stated AppSec Mission: 'to champion security integration across our global application ecosystem.' – Built In (https://builtin.com/job/devsecops-engineer/8076608), Job Post.
- Developer Enablement vs. Gatekeeping: The team focuses on automation and embedding checks into existing workflows. 'Embed security checks and best practices into our Infrastructure-as-Code workflows' – Built In (https://builtin.com/job/devsecops-engineer/8076608), Job Post.
- Risk Philosophy: The team utilizes threat modeling and design reviews for large-scale projects. 'Lead threat modeling sessions and security design reviews for net-new, large-scale applications.' – Built In (https://builtin.com/job/devsecops-engineer/8076608), Job Post.
- Stated Pain Points or Goals (Verbatim): 'Drive the end-to-end vulnerability lifecycle' – Built In (https://builtin.com/job/devsecops-engineer/8076608), Job Post.
Security Team
- Org Structure & Reporting Line: The AppSec function is part of a global cybersecurity organization led by the VP of Cybersecurity. 'Leads global cybersecurity for a Fortune 200 technology distributor and solutions company' – Kyle Malo (LinkedIn), Professional Profile.
- Key Public-Facing Leaders: 1.
- Kyle Malo, VP, Cybersecurity
- Sean Valcamp, CISO (Historical/Reference)
- Key Quote: 'Leads global cybersecurity for a Fortune 200 technology distributor and solutions company' – Kyle Malo (LinkedIn), Professional Profile.
- Team Size Estimate (as_of:): LinkedIn Search Query Used: 'people at Avnet with titles including Application Security, DevSecOps, or Product Security'.
- Result: ~10-25.
- Active AppSec Job Postings (as_of:): Count: 1.
- Common Skill/Tool Patterns: Emphasis on pipeline security automation, vulnerability lifecycle management, and threat modeling for large-scale applications.
Key Initiatives
- Security Champions Program: Status: No Evidence Found. 'Shift Left' in Practice: The team integrates security into CI/CD and IaC. 'Embed security checks and best practices into our Infrastructure-as-Code workflows' – Built In (https://builtin.com/job/devsecops-engineer/8076608), Job Post.
- Vulnerability Management Process: Intake: 'Pipeline Security Automation: Design, implement, and centrally manage advanced security tooling (SAST, DAST, SCA, Secrets Management)' – Built In (https://builtin.com/job/devsecops-engineer/8076608), Job Post.
- Triage/Remediation: 'Drive the end-to-end vulnerability lifecycle' – Built In (https://builtin.com/job/devsecops-engineer/8076608), Job Post.
- Secure SDLC Artifacts: 'Lead threat modeling sessions and security design reviews for net-new, large-scale applications.' – Built In (https://builtin.com/job/devsecops-engineer/8076608), Job Post.
- Recent Initiatives (Last 6 Months): Centralization of security tooling management. 'centrally manage advanced security tooling' – Built In (https://builtin.com/job/devsecops-engineer/8076608), Job Post.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.
Interested in this role?
Apply on LinkedIn