Information Security Engineer

we're looking for driven individuals to join our team. That's where you come in!

As an Information Security Engineer, your essential job functions will include the following:

- Vendor Risk Assessment Management (25%) - Performing vendor risk assessments for new vendors and reviewing the risk of current vendors. Maintaining our matrix of 3rd party vendor to features. Includes evaluation of AI vendors and AI workloads: data flows, the model and data supply chain, and agentic and MCP integrations. - Troubleshooting / Problem Solving (30%) - Evaluate alerting processes and systems and develop security automation processes.

Includes using AI-based engineering tools, such as AI coding assistants and MCP servers, to build security automation, along with detection engineering and the secure design of AI-enabled systems. - Documentation and Reporting (15%) - Policy & Runbook development, incident reporting, pen testing analysis. Includes AI review patterns and AI usage telemetry; technical AI risk findings feed the Governance and Policy impact assessments and AI compliance program. - Security Monitoring (10%) - Build out new monitoring capabilities, developing alerts, integrate new feeds.

Includes shadow-AI discovery and monitoring of AI tool usage and egress. - Security Guidance (20%) - Provide security guidance for compliance issues such as OWASP development practices, privacy protection, network security practices, and security framework compliance. Includes secure-by-design guidance for teams building with AI, aligned to the OWASP Top 10 for LLM and Agentic Applications and MITRE ATLAS.

- Configure technologies such as security information and event management, artificial intelligence and machine learning, intrusion detection and prevention, and various anti-malware solutions to allow for monitoring of computer systems. - Investigate security breaches and incidents. Determine if event requires further action and escalation.

Assist other teams within IT during incidents, document steps taken and lessons learned. - Provide technical security guidance for compliance issues such as OWASP development practices, privacy protection, network security practices, and security framework compliance to projects and teams. - Analyze current vulnerability management systems for effectiveness and make recommendations to maintain and improve accuracy and scalability of systems. - Evaluate new vendors and products for security risks and compliance with security policies. - Develop security automation processes to improve security posture. - Research new security threats and solutions.

Stay current with IT security news and developments in the field.

- Bachelor's degree in computer science, information security, information systems or other related field is required and/or equivalent of 3-5 years of information security work experience with exposure to infrastructure/network and multiplatform environments. - Advanced skills in scripting and automation tools like Powershell and Bash. - Professional security certification, such as a Certified Information Systems Security Professional (CISSP), CompTIA Security+, SANS Cybersecurity Certification, Certified Information Systems Auditor (CISA) or other similar credentials, is preferred but not required. - Demonstrated knowledge of security issues, techniques, and implications across the most popular computer, cloud, and IaaS platforms. - Working knowledge of AI and large language model security concepts, including prompt injection and the data-as-code trust boundary, authorization for autonomous and agentic systems, and the AI model and data supply chain. - Familiarity with AI security frameworks such as the OWASP Top 10 for LLM and Agentic Applications, the NIST AI Risk Management Framework, and MITRE ATLAS.

AI security credentials are a plus. - Ability to work independently as well as a team.

- Results Orientation - Agility - Initiative - Customer Focus - Learn Quickly - Recognize Implications - Apply Knowledge

- Continuous viewing from and inputting data to a computer screen. - Travel as necessary (

- Dealer Tire is a drug-free environment. All applicants being considered for employment must pass a pre-employment drug screening before beginning work.

Why Dealer Tire: An amazing opportunity to join a growing organization, built on the efforts of hard working, innovative, and team-oriented people. The compensation offered for this position will depend on qualifications, experience, and geographic location. The total compensation package may also include commission, bonus or profit sharing.

We offer a competitive & comprehensive benefit package including: paid time off, medical, dental, vision, and 401k match (50% on the dollar up to 7% of employee contribution). For more information on our benefit offerings, please visit our Dealer Tire Family of Companies Benefits Highlights Booklet .

*ADA Disclosure: Any candidate who feels that they may need an accommodation to complete this application, or any portions of same, based on the impact of a disability should contact Dealer Tire's Human Resources Department to discuss your specific needs. Please feel free to contact us at 1-800-933-2537 x6550.