Security Engineer II – Network & Firewall Security

Are you a hands-on cybersecurity professional who enjoys solving technical challenges, strengthening security defenses, and protecting critical business systems? URM Stores is looking for a Security Engineer II to help advance our cybersecurity capabilities and protect our enterprise technology environment.

In this role, you’ll play a key part in implementing, managing, and continuously improving security technologies that help protect URM’s systems, networks, users, and data. With a strong emphasis on network and firewall security, you’ll work at the intersection of Cybersecurity and Infrastructure, partnering with technical teams to identify risks, strengthen defenses, and deliver practical security solutions.

You’ll have the opportunity to work across a broad range of cybersecurity disciplines, including security operations, vulnerability management, endpoint protection, identity security, network defense, and incident response. You’ll also contribute directly to implementing URM’s cybersecurity roadmap, helping turn security priorities into effective technical controls and measurable improvements.

This is a role for an engineer who enjoys taking ownership, investigating complex issues, and driving solutions from identification through implementation. You’ll work independently to manage security technologies, investigate threats and vulnerabilities, and resolve challenging security issues while collaborating closely with network, systems, cloud, and architecture teams.

• Engineer, administer, and maintain enterprise cybersecurity technologies and controls.
• Provide technical expertise for firewall security, network segmentation, VPN, secure remote access, and network security architecture.
• Review firewall policies and network security configurations for appropriate access, segmentation, and risk.
• Partner with Network Engineering on firewall upgrades, rule changes, VPN/IPsec connectivity, segmentation, and secure network design.
• Support URM's security operations platform and serve as an internal Tier 2/3 escalation resource for security investigations.
• Investigate security alerts and incidents and coordinate remediation with infrastructure, application, and business teams.
• Support vulnerability and exposure management, including vulnerability analysis, risk prioritization, remediation coordination, validation, and reporting.
• Engineer and maintain endpoint security and application-control technologies.
• Support identity and access security, MFA, privileged access, Zero Trust, and secure remote-access initiatives.
• Participate in incident-response activities, tabletop exercises, and development of response playbooks.
• Support cybersecurity logging, telemetry, detection engineering, and integration of security data sources.
• Assist with implementation and tuning of technologies such as Stellar Cyber, Threat Locker, Beyond Trust, endpoint security, vulnerability-management platforms, and related controls.
• Support NIST CSF, PCI DSS, security assessments, audits, penetration testing, and remediation activities from a technical perspective.
• Participate in security architecture reviews and technology/vendor assessments.
• Develop security documentation, procedures, standards, and technical diagrams.
• Participate in after-hours incident response and on-call support as required.
• Mentor junior technical staff and share cybersecurity knowledge across Infrastructure and IT.

• 4+ years of cybersecurity, network security, network engineering, systems security, or related technical experience.
• Strong hands-on knowledge of enterprise firewalls, firewall policy, VPN/IPsec, network segmentation, routing, and TCP/IP.
• Experience administering or supporting enterprise cybersecurity…