Security Engineer - Murfreesboro, TN

Smyrna Ready Mix (SRM) is seeking an accomplished Information Security Engineer to implement and continuously improve SRM's cybersecurity posture across a rapidly growing enterprise environment.

This engineering role will be an instrumental partner with the Director of Information Security & Compliance in all aspects of information security governance, risk management, compliance, and operations, ensuring that SRM's systems, data, and infrastructure remain secure, resilient, and aligned with business objectives.

The Information Security Engineer will collaborate with the Director of Information Security & Compliance and other IT roles to help develop scalable security policies, incident response capabilities, and proactive defense measures across both on-premises and cloud (Azure/OCI) environments. This role requires a balance of technical expertise and business insight to protect SRM's expanding digital footprint.

This position reports directly to the Director of Information Security & Compliance and partners closely with IT and business team members. The Information Security Engineer will play a pivotal role in safeguarding SRM's operations and empowering the company's continued growth through secure, reliable, and innovative technology practices and processes.

The Information Security Engineer is responsible for all tasks and work efforts as a part of SRM's cybersecurity program - from design through implementation, monitoring, and continuous improvement.

• Become a valuable member of the information security team, fostering a culture of collaboration, and accountability.
• Collaborate with system and network engineers to align network infrastructure with Microsoft Entra  (Azure AD), Active Directory, and identity-based access controls.
• Implement solutions in support of cybersecurity policies, standards, and procedures in alignment with industry best practice.
• Implement security controls across network, system, application, and cloud infrastructures (Azure, OCI, O365).
• Collaborate with IT leadership to integrate security into all technology projects, ensuring secure configuration, and deployment practices.
• Perform vulnerability management and remediation activities, prioritizing mitigation efforts based on business impact.
• Perform enterprise security operations and incident response activities, leveraging SIEM, threat intelligence, analytics, and MSSP SOC to detect and mitigate risks, participate in periodic threat assessments and penetration testing, and post-incident reviews to strengthen organizational resilience.
• Define and track risk metrics on key cybersecurity performance indicators (KPIs) including health, incidents, and strategic initiatives and provide executive reports to the Director of Information Security & Compliance, CIO and IT leadership.
• Evaluate emerging threats and technologies, recommending appropriate security solutions through demonstrations, pilots and proof-of-concept/value work efforts.
• Collaborate across IT disciplines (systems, networking, applications) to ensure end-to-end resilience, visibility, and alignment of security priorities with operational needs.
• Other duties as assigned by the Director of Information Security & Compliance.

• Associate and/or Bachelor's degree in Computer Science, Information Technology, or equivalent professional certification(s).
• 3+ years of experience in information security engineering or related infrastructure roles.
• Strong technical foundation in network, system, and cloud security, including firewalls, SIEM, endpoint protection, and identity management.
• Deep understanding of various security suites for endpoint management and security (Defender, Entra , Intune,…