IT Security Specialist

DTLR, Inc.

3d•$85,000 - $95,000•Hybrid

About The Position

The IT Security Specialist is DTLR’s first dedicated security role, responsible for day-to-day protection of corporate offices, distribution operations, and retail stores. The specialist brings security work currently distributed across infrastructure, identity, and helpdesk teams into a single, measurable program. The role focuses on identity and endpoint security across Microsoft 365 and Entra ID, PCI DSS compliance for store payment systems, security monitoring and first-line incident triage with an incident response vendor, network security improvements, and security awareness for corporate and store employees. This hands-on role offers the opportunity to shape security policies, tooling, and the program roadmap as it grows. The position follows a hybrid schedule, with remote work considered, and includes occasional travel to stores and distribution sites for assessments or incident response. The specialist participates in an on-call rotation and may work outside normal hours during incidents or maintenance windows. A background check is required due to access to sensitive systems and payment environments.

Requirements

At least 3 years of IT experience, with at least 2 years focused on information security, systems administration, or security operations.
Hands-on experience with Microsoft 365 and Entra ID security, including Conditional Access and MFA.
Working experience with an EDR/XDR platform; Microsoft Defender is preferred.
Solid understanding of networking fundamentals, including TCP/IP, DNS, firewalls, VPNs, and network segmentation.
Experience investigating security alerts and documenting incidents.
Familiarity with PCI DSS or a comparable compliance framework, such as NIST CSF, CIS Controls, or SOC 2.
Bachelor’s degree in IT, cybersecurity, or a related field, or equivalent experience.
Ability to participate in an on-call rotation for security incidents.
Must pass a background check due to access to sensitive systems and payment environments.
Risk judgment, clear communication, ownership, calmness under pressure, collaboration, and continuous learning.

Nice To Haves

Experience in retail or another multi-site environment with point-of-sale and payment systems.
Experience with Microsoft Sentinel or another SIEM, including writing KQL queries and detection rules.
Experience securing Android or other mobile device fleets through Intune or a similar MDM.
Familiarity with Cloudflare security services (WAF, Zero Trust, DNS), and exposure to Meraki or other cloud-managed network platforms.
Familiarity with backup security practices such as immutable storage and recovery testing.
Scripting skills in PowerShell or Python for automation and investigations.
One or more certifications: CompTIA Security+ or CySA+, Microsoft SC-200 or SC-300, SSCP, GIAC (GSEC, GCIH), or CISSP for senior candidates.

Responsibilities

Administer and harden Microsoft Entra ID security, including Conditional Access, MFA, privileged access (PIM), and identity protection risk policies.
Conduct periodic access reviews for privileged accounts, service accounts, guest users, and cross-tenant access.
Partner with the helpdesk on secure onboarding, offboarding, and account-recovery procedures.
Manage Microsoft Defender across Endpoint, Office 365, Identity, and Cloud Apps, and maintain Intune security baselines for Windows, mobile, and Android store devices.
Tune Microsoft 365 email security, phishing protection, and data loss prevention policies.
Track vulnerabilities and coordinate patching and remediation timelines with system owners.
Own day-to-day PCI DSS activities, including scope tracking, quarterly scans, evidence collection, and annual assessment support.
Help maintain segmentation and minimize cardholder data environments as store POS and payment systems change.
Maintain security policies, standards, and a risk register, and support vendor security reviews.
Monitor security alerts, triage and investigate findings, and resolve lower-severity issues in-house.
Escalate major incidents to the outsourced incident response vendor and serve as DTLR’s primary technical liaison during the engagement.
Manage the incident response vendor relationship, including escalation criteria, contact paths, retainer terms, and post-incident reviews.
Maintain internal playbooks for in-house activities and vendor handoffs.
Work with the infrastructure team to verify backups are protected and recoverable, including immutability, isolation, and restore testing.
Partner with network engineers to understand corporate, store, and distribution network architecture, including Cloudflare services.
Review firewall, VPN, Wi-Fi, segmentation, and Cloudflare configurations and recommend security improvements.
Identify network security gaps and risks, and work with the network team to prioritize and track remediation.
Assess the security of new network, cloud, and SaaS deployments before go-live.
Run security awareness training and phishing simulations for corporate and store employees.
Serve as the escalation point for security questions from the helpdesk and business teams.
Report program metrics and top risks to IT leadership monthly.
Participate in an on-call rotation and travel occasionally to stores and distribution sites for assessments or incident response.