BMC Senior Security Engineer

Founded in 1971, Gypsum Management & Supply, Inc. (GMS) is the leading North American specialty distributor of interior building products. Our product offerings of wallboard, ceilings and complementary construction products are designed to provide a comprehensive solution for our core customer- building contractors who install our products in commercial and residential buildings. GMS's operating model enables GMS to continue to grow and expand in scope, while maintaining a high level of customer service, promoting an entrepreneurial culture, and preserving the customer intimacy of a local business.

GMS and its family of companies operate a network of nearly 300 building product distribution yards, and more than 100 tool sales and service centers, for customers across the U.S. and Canada. The Field Support Center in Tucker, Georgia serves each GMS location, providing the support needed to enable local teams to deliver outstanding service to contractors and builders in their local communities.

Qualified applicants with arrest or conviction records will be considered for employment in accordance with state and local law.


Position Summary:
The primary functions of the BMC Senior Security Engineer include acting as technical and hands-on for Cyber Security Projects; Support Enterprise Security Technologies; Full Endpoint lifecycle management using the Client Management platform; Assess and modify procedures to ensure the safety of information systems assets and protect systems from intentional or inadvertent access, modification, or destruction; Prioritize remediation of gaps based on internal and external audits.

Duties & Responsibilities:
• Act as technical hands-on for Cyber Security Projects.
• Support Enterprise Security Technologies.
• Client Management platforms.
• Assess and modify procedures to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access, modification, or destruction.
• Write security reports and make recommendations.
• Prioritize remediation of gaps based on internal and external audits.
• Work with stakeholders to provide security solutions that support their business requirements
• Identify, develop, and implement mechanisms to detect security incidents in order to enhance compliance with and support of security standards and procedures in place.
• Conduct security risk assessments on new products and systems, periodic security risk assessments on existing systems and identify and/or recommend appropriate security countermeasures and best practices.
• Respond to discovered security incidents by informing appropriate custodians, determining root cause, and identifying and executing remedial actions (if necessary) required to re-establish respective information system security.
• Assist management in setting up strategic planning of information security, compliance and internal audit policies and procedures to ensure compliance with the security and privacy regulations and state and federal laws protecting customer and employee confidentiality and privacy.
• Maintain awareness of changes in security risks, security measures, and computer systems assessing new requirements for current and emerging compliance regulations.

Basic Qualifications:
• In lieu of a degree, 10 or more years of relevant experience may suffice. Bachelor's degree in Computer Science preferred.
• Minimum of 10 years of information systems security or related auditing experience.
• Preferred certifications: CCNA, CCNP, CISSP, CEH, CISA or equivalent.
• Hands-on experience with client management tools like SCCM, Intune, Altiris or BMC Client Management, with full lifecycle experience in endpoints and servers.
• Ability to clearly communicate Information Security matters to executives, auditors, end users, and engineers, using appropriate language, examples, and tone.
• Strong analytical, technical, and problem-solving skills.
• Ability to work effectively, independent of assistance or supervision.
• Self-starter, Innovative, creative, and extremely responsive, with a strong sense of urgency.
• Willing to share knowledge and assist others in understanding technical and business topics.
• Willingness to work outside of regular business hours as required, which can include evenings, weekends, and holidays.
• Experience with a variety of security products including, but not limited to, endpoint security, network security, MFA, and DMZ silos.
• Working knowledge of information systems security standards and practices (e.g., access control and system hardening, system audit and log file monitoring, security policies, and incident handling).
• Experience with TACACS+, IDS, IPS and various SIEMS.
• Working knowledge of protocols and techn