Security Engineer II – Network & Firewall Security

URM Stores Inc is hiring a Security Engineer II – Network & Firewall Security to help protect URM’s systems, networks, users, and data. This onsite role in Spokane, WA focuses on building and improving network and firewall security controls, strengthening security operations through Tier 2/3 escalation, and integrating detection, logging, and vulnerability management to support faster, more informed response.

Benefits that support your life outside of work

• Salary: $102,000 - $125,000 per year (DOE)
• Insurance: URM pays 100% of Medical/Dental/Vision/RX premiums for the employee and over 93% for dependents
• 401k Retirement Plan: company match up to 9% of annual salary
• Life Insurance: subsidized for employees, with great rates for the employee’s family
• Disability Coverage: company paid Long-Term Disability; Short-Term Disability and Cancer Insurance available
• Life Flight Insurance: special rate
• Time off: great vacation plan, six paid holidays and four paid personal holidays, plus paid sick days
• Volunteer paid day: Paid Volunteer Service Day to get paid to volunteer at a favorite non-profit
• Company-sponsored fun: events like URM March Madness Brackets, Family Hockey Night with the Chiefs, Holiday Mingle & Jingle, Summer Evening Wine & Music, and Winter Break Movie Night
• Discounts: corporate discounts including gym memberships, cell phone plans, and computer discounts
• Employee discount program: Amazing Employee Discount Program at URM’s Company-owned Grocery Stores

What you’ll do

• Engineer, administer, and maintain enterprise cybersecurity technologies and controls
• Provide technical expertise for firewall security, network segmentation, VPN, secure remote access, and network security architecture
• Review firewall policies and network security configurations to ensure appropriate access, segmentation, and risk alignment
• Collaborate with Network Engineering on firewall upgrades, rule changes, VPN/IPsec connectivity, segmentation, and secure network design
• Support the security operations platform and serve as an internal Tier 2/3 escalation resource for security investigations
• Investigate security alerts and incidents and coordinate remediation with infrastructure, application, and business teams
• Support vulnerability and exposure management including vulnerability analysis, risk prioritization, remediation coordination, validation, and reporting
• Engineer and maintain endpoint security and application-control technologies
• Support identity and access security including MFA, privileged access, Zero Trust, and secure remote-access initiatives
• Participate in incident response activities, tabletop exercises, and development of response playbooks
• Support cybersecurity logging, telemetry, detection engineering, and integration of security data sources
• Assist with implementation and tuning of technologies such as Stellar Cyber, ThreatLocker, BeyondTrust, endpoint security, and vulnerability-management platforms
• Support NIST CSF, PCI DSS, security assessments, audits, penetration testing, and remediation from a technical perspective
• Participate in security architecture reviews and technology or vendor assessments
• Develop security documentation, procedures, standards, and technical diagrams
• Participate in after-hours incident response and on-call support as required
• Mentor junior technical staff and share cybersecurity knowledge across Infrastructure and IT

What you bring

• 4+ years of cybersecurity, network security, network engineering, systems security, or related technical experience
• Strong hands-on knowledge of enterprise firewalls, firewall policy, VPN/IPsec, network segmentation, routing, and TCP/IP
• Experience administering or supporting enterprise cybersecurity technologies
• Experience investigating security events and analyzing technical security issues
• Working knowledge of vulnerability management and remediation processes
• Understanding of endpoint security, identity and access management, MFA, logging/SIEM, and incident response
• Understanding of NIST CSF or comparable cybersecurity frameworks
• Ability to independently troubleshoot complex security and network problems
• Strong documentation and communication skills

Tools and technologies involved

Firewalls, VPN/IPsec, TCP/IP, Stellar Cyber, ThreatLocker, BeyondTrust, endpoint security, application-control technologies, vulnerability-management platforms, MFA, SIEM, NIST CSF, PCI DSS, Fortinet/FortiGate, Fortinet certification, Qualys, Microsoft Entra, Microsoft Defender, Carbon Black, SASE, ZTNA, Zero Trust