Security Engineer - Murfreesboro, TN

Smyrna Ready Mix (SRM) is seeking an accomplished Information Security Engineer to implement and continuously improve SRM’s cybersecurity posture across a rapidly growing enterprise environment.

This engineering role will be an instrumental partner with the Director of Information Security & Compliance in all aspects of information security governance, risk management, compliance, and operations, ensuring that SRM’s systems, data, and infrastructure remain secure, resilient, and aligned with business objectives.

The Information Security Engineer will collaborate with the Director of Information Security & Compliance and other IT roles to help develop scalable security policies, incident response capabilities, and proactive defense measures across both on-premises and cloud (Azure/OCI) environments. This role requires a balance of technical expertise and business insight to protect SRM’s expanding digital footprint. 

This position reports directly to the Director of Information Security & Compliance and partners closely with IT and business team members.  The Information Security Engineer will play a pivotal role in safeguarding SRM’s operations and empowering the company’s continued growth through secure, reliable, and innovative technology practices and processes.

The Information Security Engineer is responsible for all tasks and work efforts as a part of SRM’s cybersecurity program — from design through implementation, monitoring, and continuous improvement.

• Become a valuable member of the information security team, fostering a culture of collaboration, and accountability.
• Collaborate with system and network engineers to align network infrastructure with Microsoft Entra ID (Azure AD), Active Directory, and identity-based access controls.
• Implement solutions in support of cybersecurity policies, standards, and procedures in alignment with industry best practice.
• Implement security controls across network, system, application, and cloud infrastructures (Azure, OCI, O365).
• Collaborate with IT leadership to integrate security into all technology projects, ensuring secure configuration, and deployment practices.
• Perform vulnerability management and remediation activities, prioritizing mitigation efforts based on business impact.
• Perform enterprise security operations and incident response activities, leveraging SIEM, threat intelligence, analytics, and MSSP SOC to detect and mitigate risks, participate in periodic threat assessments and penetration testing, and post-incident reviews to strengthen organizational resilience.
• Define and track risk metrics on key cybersecurity performance indicators (KPIs) including health, incidents, and strategic initiatives and provide executive reports to the Director of Information Security & Compliance, CIO and IT leadership.
• Evaluate emerging threats and technologies, recommending appropriate security solutions through demonstrations, pilots and proof-of-concept/value work efforts.
• Collaborate across IT disciplines (systems, networking, applications) to ensure end-to-end resilience, visibility, and alignment of security priorities with operational needs.
• Other duties as assigned by the Director of Information Security & Compliance.

• Associate and/or Bachelor’s degree in Computer Science, Information Technology, or equivalent professional certification(s).
• 3+ years of experience in information security engineering or related infrastructure roles.
• Strong technical foundation in network, system, and cloud security, including firewalls, SIEM, endpoint protection, and identity management.
• Deep understanding of various security suites for endpoint management and security (Defender, Entra ID, Intune, SentinelOne, Avanon, Azure Security Center and similar).
• Experience with two or more of these focus areas: Incident Response, Vulnerability Management, Network Security, Application Security, and Cloud Security.
• Strong analytical, problem-solving, and critical thinking skills.
• Excellent communication and interpersonal skills.
• Relevant certifications such as CISSP, Security+, PenTest+ or CySA+.
• Experience with Zero Trust architecture and/or cloud-native security solutions.
• Knowledge of data loss prevention (DLP), MFA, SIEM/SOAR, and endpoint detection and response (EDR) platforms.
• Familiarity with network monitoring and analysis tools.
• Demonstrated ability to work collaboratively with system engineers, application teams, and field personnel.
• Contribute to team knowledge sharing, mentoring, and continuous improvement initiatives.
• Familiarity with infrastructure-as-code and automation tools (Ansible, Terraform) would be preferred.
• Experience in Zero Trust, SD-WAN, or network segmentation strategies would be preferred.
• Experience in developing and maintaining automation scripts using PowerShell, Python, or Bash for provisioning and maintenance tasks would be preferred.

Smyrna Ready Mix (SRM) is a growing leader in the ready-mix concrete industry, recognized for excellence, integrity, and innovation. Our IT department supports a fast-paced, technology-driven environment, ensuring reliable systems and connectivity across all SRM locations nationwide.

Joining SRM IT means becoming part of a collaborative, forward-thinking team that values accountability, growth, and teamwork. We leverage modern infrastructure solutions to support SRM’s mission—building better communities with reliable service and sustainable growth.