Principal, Security Engineer

American Tire Distributors•Huntersville, NC

About The Position

As the nation's premier tire distributor, ATD’s coast-to-coast distribution network provides approximately 80,000 customers across the U.S. and Canada with rapid and frequent delivery of high quality tires, custom wheels and shop supplies. Position Description: The Principal Security Engineer oversees the Company's SIEM infrastructure and managing critical security components such as Web Application Firewall (WAF), Domain Management, and Certificate Management. This role collaborates extensively across teams to ensure robust security monitoring, incident response, and proactive threat detection. The role requires oversight of SIEM technologies, WAF management, DNS management, certificate lifecycle management, and incident response.

Requirements

Bachelor’s degree
12 years of related experience preferred
Skills
Authentication Server Management
Communicates Effectively
Cultivates Innovation
Decision Quality
Courage
Data Collection and Analysis
Data Control
Ensures Accountability
Manages Complexity
Nimble Learning
IT Data Management
Network/IT security
Plans & Aligns
Optimizes Work Processes
Perform Gap Analysis
Tech Savvy
Transaction Security and Virus Protection
Compliance Management
Action Planning
Collaboration
Database Administration

Responsibilities

Assist the Incident Response Team during security incidents, providing support in log analysis and event correlation.
Collaborate with application development teams to ensure effective protection of web applications.
Contribute to the design and implementation of disaster recovery and contingency plans to protect company data.
Deploy, configure, and manage the organization's Web Application Firewall solution.
Deploy, configure, monitor, and maintain the organization's SIEM infrastructure.
Design and conduct tests on website and application software to monitor, diagnose, and correct performance issues.
Develop and maintain correlation rules, alerts, and reports within the SIEM.
Generate regular reports on security incidents, trends, system performance, and compliance.
Implement and enforce domain name security best practices, such as DNSSEC and SSL/TLS.
Implement necessary security measures such as firewalls and encryption, monitoring their performance and notifying security experts of any issues.
Integrate and manage log sources from diverse systems to ensure comprehensive security event monitoring.
Manage the lifecycle of digital certificates, including issuance, installation, renewal, and revocation.