Security Engineer II – Network & Firewall Security
About The Position
URM Stores is seeking a hands-on cybersecurity professional for the role of Security Engineer II to advance cybersecurity capabilities and protect its enterprise technology environment. This role focuses on implementing, managing, and improving security technologies, with a strong emphasis on network and firewall security. The engineer will work closely with technical teams to identify risks, strengthen defenses, and deliver practical security solutions. Responsibilities span security operations, vulnerability management, endpoint protection, identity security, network defense, and incident response. The position involves contributing to URM’s cybersecurity roadmap, turning priorities into effective technical controls. This role is for an engineer who enjoys taking ownership, investigating complex issues, and driving solutions from identification through implementation, working independently while collaborating with network, systems, cloud, and architecture teams.
Requirements
- 4+ years of cybersecurity, network security, network engineering, systems security, or related technical experience.
- Strong hands-on knowledge of enterprise firewalls, firewall policy, VPN/IPsec, network segmentation, routing, and TCP/IP.
- Experience administering or supporting enterprise cybersecurity technologies.
- Experience investigating security events and analyzing technical security issues.
- Working knowledge of vulnerability management and remediation processes.
- Understanding of endpoint security, identity and access management, MFA, logging/SIEM, and incident response.
- Understanding of NIST CSF or comparable cybersecurity frameworks.
- Ability to independently troubleshoot complex security and network problems.
- Strong documentation and communication skills.
Nice To Haves
- Hands-on Fortinet/FortiGate experience.
- Experience with Stellar Cyber or comparable SIEM/XDR platforms.
- Experience with ThreatLocker, BeyondTrust, Qualys, Microsoft Entra, Microsoft Defender, Carbon Black, or comparable technologies.
- Experience with PCI DSS environments.
- Experience with SASE, ZTNA, Zero Trust, and cloud networking/security.
- Security+, CySA+, Fortinet certification, CCNA/CCNP, CISSP, or comparable certification.
- Experience in multi-site retail, warehouse, distribution, or other operationally critical environments
Responsibilities
- Engineer, administer, and maintain enterprise cybersecurity technologies and controls.
- Provide technical expertise for firewall security, network segmentation, VPN, secure remote access, and network security architecture.
- Review firewall policies and network security configurations for appropriate access, segmentation, and risk.
- Partner with Network Engineering on firewall upgrades, rule changes, VPN/IPsec connectivity, segmentation, and secure network design.
- Support URM's security operations platform and serve as an internal Tier 2/3 escalation resource for security investigations.
- Investigate security alerts and incidents and coordinate remediation with infrastructure, application, and business teams.
- Support vulnerability and exposure management, including vulnerability analysis, risk prioritization, remediation coordination, validation, and reporting.
- Engineer and maintain endpoint security and application-control technologies.
- Support identity and access security, MFA, privileged access, Zero Trust, and secure remote-access initiatives.
- Participate in incident-response activities, tabletop exercises, and development of response playbooks.
- Support cybersecurity logging, telemetry, detection engineering, and integration of security data sources.
- Assist with implementation and tuning of technologies such as Stellar Cyber, ThreatLocker, BeyondTrust, endpoint security, vulnerability-management platforms, and related controls.
- Support NIST CSF, PCI DSS, security assessments, audits, penetration testing, and remediation activities from a technical perspective.
- Participate in security architecture reviews and technology/vendor assessments.
- Develop security documentation, procedures, standards, and technical diagrams.
- Participate in after-hours incident response and on-call support as required.
- Mentor junior technical staff and share cybersecurity knowledge across Infrastructure and IT.
Benefits
- Medical/Dental/Vision/RX Insurance premiums paid 100% for employee and over 93% for dependents
- 401k Retirement Plan with up to 9% Company match
- Subsidized Life Insurance for employees and family
- Company paid Long-Term Disability insurance
- Short-Term Disability and Cancer Insurance available
- Life Flight Insurance at Special Rate
- Great vacation plan
- Six Paid Holidays and four Paid Personal Holidays
- Paid Sick Days
- Paid Volunteer Service Day
- Company sponsored activities (e.g., URM March Madness Brackets, Family Hockey Night, Holiday Mingle & Jingle, Summer Evening Wine & Music Event, Winter Break Movie Night)
- Corporate discounts (gym memberships, cell phone plans, computer discounts)
- Employee Discount Program at Company-owned Grocery Stores
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
Education Level
No Education Listed
