Security Engineer II – Network & Firewall Security

Alpha Cube, Inc.; Spokane (WA); On-site; USD 102,000 - 125,000; Full time

Benefits offered by this job

Medical/Dental/Vision/RX premiums paid

401k with company match up to 9%

Paid vacation and holidays

Paid sick days

Employee discounts

Job summary

URM Stores, Inc. is seeking a Security Engineer II to advance our cybersecurity capabilities and protect our enterprise environment in Spokane, WA.

You will implement and manage security technologies, focusing on firewall security, network segmentation, and remote access while collaborating with cross-functional teams. The role covers security operations, vulnerability management, endpoint protection, identity security, and incident response, with opportunities to contribute to the URM

Qualifications

• 4+ years of cybersecurity, network security, or related technical experience.
• Strong hands-on knowledge of enterprise firewalls, firewall policy, VPN/IPsec, network segmentation, routing, and TCP/IP.
• Experience administering or supporting enterprise cybersecurity technologies.
• Experience investigating security events and analyzing technical security issues.
• Understanding of NIST CSF or comparable cybersecurity frameworks.

Responsibilities

• Engineer, administer, and maintain enterprise cybersecurity technologies and controls.
• Provide technical expertise for firewall security, network segmentation, VPN, secure remote access, and network security architecture.
• Review firewall policies and network security configurations for appropriate access, segmentation, and risk.
• Partner with Network Engineering on firewall upgrades, rule changes, VPN/IPsec connectivity, segmentation, and secure network design.
• Support URM's security operations platform and serve as an internal Tier 2/3 escalation resource for security investigations.
• Investigate security alerts and incidents and coordinate remediation with infrastructure, application, and business teams.
• Support vulnerability and exposure management, including vulnerability analysis, risk prioritization, remediation coordination, validation, and reporting.
• Engineer and maintain endpoint security and application-control technologies.
• Support identity and access security, MFA, privileged access, Zero Trust, and secure remote-access initiatives.
• Participate in incident-response activities, tabletop exercises, and development of response playbooks.
• Support cybersecurity logging, telemetry, detection engineering, and integration of security data sources.
• Assist with implementation and tuning of technologies such as Stellar Cyber, ThreatLocker, BeyondTrust, endpoint security, vulnerability-management platforms, and related controls.
• Support NIST CSF, PCI DSS environments, security assessments, audits, penetration testing, and remediation activities from a technical perspective.
• Participate in security architecture reviews and technology/vendor assessments.
• Develop security documentation, procedures, standards, and technical diagrams.
• Participate in after-hours incident response and on-call support as required.
• Mentor junior technical staff and share cybersecurity knowledge across Infrastructure and IT.

Skills

Firewall management

Incident response

Vulnerability management

SIEM/logging

Network security

Tools

Fortinet/FortiGate

Stellar Cyber

ThreatLocker

BeyondTrust

Qualys

Microsoft Entra

Microsoft Defender

Carbon Black

Job description

Are you a hands-on cybersecurity professional who enjoys solving technical challenges, strengthening security defenses, and protecting critical business systems? URM Stores is looking for a Security Engineer II to help advance our cybersecurity capabilities and protect our enterprise technology environment.

In this role, you’ll play a key part in implementing, managing, and continuously improving security technologies that help protect URM’s systems, networks, users, and data. With a strong emphasis on network and firewall security, you’ll work at the intersection of Cybersecurity and Infrastructure, partnering with technical teams to identify risks, strengthen defenses, and deliver practical security solutions.

You’ll have the opportunity to work across a broad range of cybersecurity disciplines, including security operations, vulnerability management, endpoint protection, identity security, network defense, and incident response. You’ll also contribute directly to implementing URM’s cybersecurity roadmap, helping turn security priorities into effective technical controls and measurable improvements.

This is a role for an engineer who enjoys taking ownership, investigating complex issues, and driving solutions from identification through implementation. You’ll work independently to manage security technologies, investigate threats and vulnerabilities, and resolve challenging security issues while collaborating closely with network, systems, cloud, and architecture teams.

Key Areas Of Responsibility

• Engineer, administer, and maintain enterprise cybersecurity technologies and controls.
• Provide technical expertise for firewall security, network segmentation, VPN, secure remote access, and network security architecture.
• Review firewall policies and network security configurations for appropriate access, segmentation, and risk.
• Partner with Network Engineering on firewall upgrades, rule changes, VPN/IPsec connectivity, segmentation, and secure network design.
• Support URM's security operations platform and serve as an internal Tier 2/3 escalation resource for security investigations.
• Investigate security alerts and incidents and coordinate remediation with infrastructure, application, and business teams.
• Support vulnerability and exposure management, including vulnerability analysis, risk prioritization, remediation coordination, validation, and reporting.
• Engineer and maintain endpoint security and application-control technologies.
• Support identity and access security, MFA, privileged access, Zero Trust, and secure remote-access initiatives.
• Participate in incident-response activities, tabletop exercises, and development of response playbooks.
• Support cybersecurity logging, telemetry, detection engineering, and integration of security data sources.
• Assist with implementation and tuning of technologies such as Stellar Cyber, ThreatLocker, BeyondTrust, endpoint security, vulnerability-management platforms, and related controls.
• Support NIST CSF, PCI DSS, security assessments, audits, penetration testing, and remediation activities from a technical perspective.
• Participate in security architecture reviews and technology/vendor assessments.
• Develop security documentation, procedures, standards, and technical diagrams.
• Participate in after-hours incident response and on-call support as required.
• Mentor junior technical staff and share cybersecurity knowledge across Infrastructure and IT.

Qualifications

Required

• 4+ years of cybersecurity, network security, network engineering, systems security, or related technical experience.
• Strong hands-on knowledge of enterprise firewalls, firewall policy, VPN/IPsec, network segmentation, routing, and TCP/IP.
• Experience administering or supporting enterprise cybersecurity technologies.
• Experience investigating security events and analyzing technical security issues.
• Working knowledge of vulnerability management and remediation processes.
• Understanding of endpoint security, identity and access management, MFA, logging/SIEM, and incident response.
• Understanding of NIST CSF or comparable cybersecurity frameworks.
• Ability to independently troubleshoot complex security and network problems.
• Strong documentation and communication skills.

Preferred

• Hands-on Fortinet/FortiGate experience.
• Experience with Stellar Cyber or comparable SIEM/XDR platforms.
• Experience with ThreatLocker, BeyondTrust, Qualys, Microsoft Entra, Microsoft Defender, Carbon Black, or comparable technologies.
• Experience with PCI DSS environments.
• Experience with SASE, ZTNA, Zero Trust, and cloud networking/security.
• Security+, CySA+, Fortinet certification, CCNA/CCNP, CISSP, or comparable certification.
• Experience in multi-site retail, warehouse, distribution, or other operationally critical environments.

A Legacy of Local Impact Since 1921

For over a century, URM Stores, Inc. has been the powerhouse behind independent grocers throughout the Inland Northwest. Our mission is simple: help local grocers thrive by handling everything from purchasing and warehousing to the timely delivery of top-quality merchandise.

What makes URM so unique? Our co-operative model means our Member-Owners aren’t just customers, they’re shareholders. We reinvest in their success by returning earnings to our Co-Op members as patronage dividends.

Today, URM employs more than 3,000 dedicated team members, including those at our subsidiaries Rosauers Supermarkets and Peirone Produce.

We Work In a Supportive Team Environment And In Addition To Our Amazing Culture, Our Employees Enjoy Many Perks, And Below Are a Few Of The Highlights Of Our Complete Compensation Package

• An employee’s pay position within the salary range will be based on several factors including, the prevailing minimum wage for the location, relevant education, qualifications, certifications, experience, skills, seniority, geographic location, performance, shift, travel requirements, and business or organizational needs. Salary $102,000 - $125,000 DOE, plus so much more!
• Insurance Benefits – So that our non-union employees have more to take home from their paycheck, URM pays 100% of the Medical/Dental/Vision/RX Insurance premiums for the employee and over 93% for the employee’s dependents!
• 401k Retirement Plan with an amazing Company match up to 9% of your annual salary!
• Subsidized Life Insurance for employees and great rates for the employee’s family.
• Company paid Long-Term Disability insurance.
• Short-Term Disability and Cancer Insurance available.
• Life Flight Insurance at Special Rate.
• Great vacation plan!
• Six Paid Holidays and four Paid Personal Holidays.
• Paid Sick Days.
• Paid Volunteer Service Day! Get paid to volunteer at your favorite non-profit!
• Experience enjoyable Company sponsored activities through events like URM March Madness Brackets, Family Hockey Night with the Chiefs, Holiday Mingle & Jingle with great raffle giveaways, Summer Evening Wine & Music Event, and Winter Break Movie Night, which are just a glimpse of the fun we have to offer for employees and their families!
• Plus, enjoy a variety of Corporate discounts, from gym memberships, cell phone plans, to computer discounts!
• We also offer an Amazing Employee Discount Program at our Company-owned Grocery Stores!!!!

URM Stores, Inc. is proud to be an equal opportunity employer, committed to fostering an inclusive workplace. We provide equal employment opportunities to all individuals regardless of race, religion, color, national origin, citizenship, sex, sexual orientation, gender identity, age, disability, ancestry, veteran status, genetic information, or any other characteristic protected by federal or state law.

We are dedicated to maintaining a work environment free from discrimination in all aspects of employment, including recruitment, hiring, training, promotions, compensation, and workplace practices.