Information Security Engineer

Dealer Tire is a family‑owned, international distributor of tires and parts established in 1918. Base Pay Range: $95,000–$115,000.

• Vendor Risk Assessment Management (25%)– Performing vendor risk assessments for new vendors, reviewing risk of current vendors, maintaining a matrix of third‑party vendors to features, and evaluating AI vendors and workloads.
• Troubleshooting / Problem Solving (30%)– Evaluating alerting processes, developing security automation processes, using AI‑based engineering tools to build security automation, detection engineering, and secure design of AI‑enabled systems.
• Documentation and Reporting (15%)– Policy & Runbook development, incident reporting, penetration‑testing analysis, AI usage telemetry, and feeding governance and policy impact assessments.
• Security Monitoring (10%)– Building new monitoring capabilities, developing alerts, integrating new feeds, including shadow‑AI discovery and monitoring of AI tool usage and egress.
• Security Guidance (20%)– Providing guidance on compliance issues such as OWASP development practices, privacy protection, network security practices, and secure‑by‑design guidance for teams building with AI, aligned to the OWASP Top
  10 for LLM and Agentic Applications and MITRE ATLAS.
• Additional Responsibilities
  – Configuring security technologies such as SIEM, AI/ML, intrusion detection and prevention, anti‑malware solutions; investigating security breaches and incidents; determining escalation requirements; assisting other IT teams during incidents; documenting lessons learned; providing technical compliance guidance; analyzing vulnerability management systems; evaluating vendors; developing automation; researching new security threats; staying current with industry developments.

• Bachelor’s degree in computer science, information security, information systems, or a related field, or 3–5 years of information security experience.
• Advanced scripting and automation skills (Power Shell, Bash).
• Professional security certifications preferred, such as CISSP, CompTIA Security+, SANS, or CISA.
• Knowledge of security issues across popular cloud and IaaS platforms.
• Working knowledge of AI and large‑language‑model security concepts, including prompt injection, data‑as‑code trust boundaries, autonomous and agentic systems, and AI data supply chains.
• Familiarity with AI security frameworks (OWASP Top
  10 for LLM, NIST AI Risk Management Framework, MITRE ATLAS). AI security credentials are a plus.
• Ability to work independently as well as collaboratively in a team environment.

• Results Orientation
• Agility
• Initiative
• Customer Focus
• Learn Quickly
• Recognize Implications
• Apply Knowledge

Continuous viewing of and inputting data to a computer screen; travel as necessary (