IT Security Specialist

JD Sports Fashion

1d•$85,000 - $95,000•Hybrid

About The Position

The IT Security Specialist is DTLR’s first dedicated security role, responsible for consolidating day-to-day security work across infrastructure, identity, and helpdesk teams into a measurable program protecting corporate offices, distribution operations, and retail stores. The hands-on position focuses on identity and endpoint security across Microsoft 365 and Entra ID, PCI DSS compliance for store payment systems, security monitoring and incident triage, network security partnership, and security awareness. The role offers room to shape security policies, tooling, and the program roadmap as it grows. The specialist administers identity and access controls, manages endpoint, email, and cloud security, supports PCI DSS compliance and vendor security reviews, monitors and triages alerts, and coordinates major incidents with an outsourced incident response vendor. The role also partners with network engineers to assess and improve network security, verifies backup protections and recoverability with infrastructure, conducts awareness training, and reports program metrics and risks to IT leadership monthly. The position has a hybrid schedule, with remote work considered, and occasional travel to stores and distribution sites for assessments or incident response. It includes participation in an on-call rotation and may require work outside normal hours during incidents or maintenance windows. A background check is required because the role has access to sensitive systems and payment environments.

Requirements

At least 3 years of IT experience, including at least 2 years focused on information security, systems administration, or security operations.
Hands-on experience with Microsoft 365 and Entra ID security, including Conditional Access and MFA.
Working experience with an EDR/XDR platform, preferably Microsoft Defender.
Solid understanding of networking fundamentals, including TCP/IP, DNS, firewalls, VPNs, and network segmentation.
Experience investigating security alerts and documenting incidents.
Familiarity with PCI DSS or a comparable compliance framework, such as NIST CSF, CIS Controls, or SOC 2.
Bachelor’s degree in IT, cybersecurity, or a related field, or equivalent experience.
Ability to participate in an on-call rotation for security incidents.
Ability to pass a background check due to access to sensitive systems and payment environments.

Nice To Haves

Experience in retail or another multi-site environment with point-of-sale and payment systems.
Experience with Microsoft Sentinel or another SIEM, including writing KQL queries and detection rules.
Experience securing Android or other mobile device fleets through Intune or a similar MDM.
Familiarity with Cloudflare security services (WAF, Zero Trust, DNS); exposure to Meraki or other cloud-managed network platforms.
Familiarity with backup security practices such as immutable storage and recovery testing.
Scripting skills in PowerShell or Python for automation and investigations.
One or more certifications: CompTIA Security+ or CySA+, Microsoft SC-200 or SC-300, SSCP, GIAC (GSEC, GCIH), or CISSP for senior candidates.

Responsibilities

Administer and harden Microsoft Entra ID security, including Conditional Access, MFA, privileged access (PIM), and identity protection risk policies.
Conduct periodic access reviews for privileged accounts, service accounts, guest users, and cross-tenant access.
Partner with the helpdesk on secure onboarding, offboarding, and account-recovery procedures.
Manage Microsoft Defender (Endpoint, Office 365, Identity, and Cloud Apps) and Intune security baselines across Windows, mobile, and Android store devices.
Tune email security, phishing protection, and data loss prevention policies in Microsoft 365.
Track vulnerabilities and coordinate patch and remediation timelines with system owners.
Own day-to-day PCI DSS compliance activities, including scope tracking, quarterly scans, evidence collection, and annual assessment support.
Help maintain segmented and minimized cardholder data environments as store POS and payment systems change.
Maintain security policies, standards, and a risk register; support vendor security reviews.
Monitor security alerts from Defender and other tools, and triage, investigate, and resolve lower-severity findings in-house.
Escalate major incidents to the outsourced incident response vendor and serve as DTLR’s primary technical liaison during the engagement.
Manage the incident response vendor relationship, including escalation criteria, contact paths, retainer terms, and post-incident reviews.
Maintain internal playbooks for in-house activities and vendor handoffs.
Work with the infrastructure team to confirm backups are protected and recoverable, including immutability, isolation, and restore testing.
Partner with network engineers to understand corporate, store, and distribution network architecture, including managed Cloudflare services.
Review firewall, VPN, Wi-Fi, segmentation, and Cloudflare configurations from a security perspective and recommend improvements.
Identify network security gaps and risks, and work with the network team to prioritize and track remediation.
Assess the security of new network, cloud, and SaaS deployments before go-live.
Run security awareness training and phishing simulations for corporate and store employees.
Serve as the escalation point for security questions from helpdesk and business teams.
Report program metrics and top risks to IT leadership monthly.
Participate in an on-call rotation for security incidents and work outside normal hours during incidents or maintenance windows as needed.