Senior Information Security Engineer

Senior Information Security Engineer

Here at Discount Tire, we celebrate the spirit of our people with extraordinary pride and enthusiasm. Our business has been growing for more than 60 years and now is the best time in our history to join us. We are opening more locations every year and we are always looking for qualified individuals to join us in our growth. We are a company that promotes from within, both in our retail and corporate operations.

As a Senior Information Security Engineer, you will be a critical part of our Enterprise Cybersecurity team, responsible for protecting the organization's data and information systems from both internal and external threats. This role requires a deep understanding of the latest security technologies, methodologies, and best practices to proactively safeguard our IT infrastructure and sensitive data across various platforms, including cloud, on-premises, and hybrid environments.

You will work closely with cross-functional teams across IT to integrate security measures into every aspect of our infrastructure and operations. By implementing robust security frameworks, policies, and procedures, you will help mitigate risks, prevent data breaches, and ensure compliance with relevant industry standards and regulations.

This position provides an exciting opportunity to lead security initiatives and projects, mentor junior team members, and drive execution of the organization's security strategy and roadmap. You will be a key contributor in identifying and responding to emerging threats, conducting vulnerability assessments, and ensuring the ongoing security of our systems and applications. As a Senior Information Security Engineer, your role will be central in establishing a security-first culture within the organization, ensuring our security posture evolves with the constantly changing threat landscape.

By joining our team, you will have the chance to make a direct impact on the security and integrity of the organization's infrastructure, applications, and data, contributing to the overall success and growth of the business.

Essential Duties and Responsibilities:

• Implements, maintains and operates information system security controls and countermeasures across a variety of platforms and environments, including on-premises, cloud, and hybrid infrastructures.
• Oversees the administration and optimization of security tools and technologies such as SIEM, intrusion detection/prevention systems, endpoint security, etc.
• Monitors information systems for security incidents and vulnerabilities; develops monitoring and visibility capabilities; reports on incidents, vulnerabilities, and trends.
• Responds to information system security incidents, including investigation of, countermeasures to, and recovery from computer-based attacks, unauthorized access, and policy breaches; interacts and coordinates with third-party incident responders, including law enforcement.
• Analyzes trends, news and changes in threat and compliance environment with respect to organizational risk; advises organization management and develops and executes plans for compliance and mitigation of risk; performs risk and compliance self-assessments and engages and coordinates third-party risk and compliance assessments.
• Develops and implements advanced detection capabilities to identify and respond to malicious activities in real time. Creates custom detection rules, tune existing rules, and leverage threat intelligence feeds to enhance our security monitoring. Work closely with the security operations team to build and improve detection systems, ensuring they are capable of identifying emerging threats and attack techniques.
• Designs, develops, and implements security automation workflows and custom scripting to streamline incident response, threat detection, and remediation processes across the security technology stack.
• Conducts proactive threat hunting activities using advanced analytical techniques and threat intelligence to identify sophisticated attacks and advanced persistent threats that may evade traditional security controls; develops hypotheses and creates actionable intelligence for security operations.
• Serves as a primary technical liaison during major security incidents, delivering executive-level briefings and coordinating communication strategies with leadership, legal teams, regulatory bodies, and external stakeholders while maintaining operational security requirements.
• Analyzes and develops information security governance, including organizational policies, procedures, standards, baselines and guidelines with respect to information security and use and operation of information systems.
• Develops and administers, or provides advice, evaluation, and oversight for, information security training and awareness programs.
• Coaches and mentors' level, I and II.
• Other duties as assigned

Qualifications:

• This position requires a minimum of 5 years progressively responsible information technology experience. Minimum of 5 years hands-on experience with security tools including, but not limited to, reverse proxies, intrusion prevention, endpoint detection and response, vulnerability management, SIEM, malware detection. Corporate retail experience is preferred.
• Proven expertise with any combination of the following: secure coding, threat modeling, identity management and authentication, cryptography, penetration testing, authentication and security protocols, system administration and network security is necessary.
• Minimum 3 years of hands-on threat hunting experience using tools such as Splunk or similar SIEM platforms; demonstrated expertise in analyzing network traffic, log analysis, and behavioral analytics to identify malicious activities and attack patterns.
• An understanding of Web services and experience with multiple programming languages (such as, JSON, Java, C++, Ruby, Python, Perl, etc.) is preferred. Expert knowledge of TCP/IP, common protocols and standards is necessary.
• Demonstrated experience analyzing large data sets and unstructured data for the purpose of identifying trends and anomalies indicative of malicious activity, as well as demonstrated capability to learn and develop new techniques is crucial.
• Proven ability to manage productive relationships with vendors and internal stakeholders. Ability to proactively educate stakeholders on security best practices. Expert ability to communicate across all levels of IT, present complex ideas concisely and clearly articulate technical ideas both verbally and in writing is necessary.
• Intermediate skills with Microsoft office, including skills with Word, Excel, PowerPoint and Visio is necessary.
• Ability to identify complex problems, review information to develop and evaluate options then recommend solutions is essential.
• Expert collaboration, influencing and negotiation skills are required.
• Demonstrated experience in high-pressure incident response scenarios with proven ability to communicate complex technical security issues to executive leadership and external stakeholders; experience coordinating with legal, PR, and regulatory teams during security incidents.
• Able to work efficiently and accurately under pressure, meet deadlines, present a professional demeanor and work well independently is essential.
• In addition, troubleshooting and organizational skills with a can-do attitude and the ability to adjust to changing requirements are essential
• Superior customer service skills are essential including the ability to manage and respond to different customer situations while maintaining a positive and friendly attitude.
• Maintaining confidentiality, treating others with respect and upholding Company values are key attributes.

Educational Requirements:

• Bachelor's degree in Computer Science, Engineering, Information Technology or other related field preferred, or equivalent work experience.
• Security certifications such as GIAC, GSEC, GCED, or CISSP preferred.

Normal work days are Monday through Friday. Occasional Saturdays and Sundays may be necessary.

Normal work hours are 8:00 a.m. to 5:00 p.m. Additional hours may be necessary.

Discount Tire provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local law.