{"id":3894186,"url":"https://alion.io/job/dtlr-it-security-specialist","title":"IT Security Specialist","company":{"id":2799680,"name":"DTLR","domain":"dtlr.com","url":"https://alion.io/company/dtlr","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Support","role_family":"Support","seniority":"junior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":85000,"max":95000,"currency":"USD","period":"year","gross":null,"usd_annual":95000},"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Cloudflare","optional":false},{"name":"DNS","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"NIST CSF","optional":false},{"name":"PCI DSS","optional":false},{"name":"SOC 2","optional":false},{"name":"TCP/IP","optional":false},{"name":"VPN","optional":false},{"name":"Wi-Fi","optional":false},{"name":"Windows","optional":false},{"name":"Microsoft Sentinel","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"SIEM","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-11-06T22:33:34Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-08T08:36:47Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Come work for us!\nWe are looking for dedicated employees to join our team to help our customers have the best experience possible every time they enter a DTLR store.\nOur employees are key to our success.\nThe IT Security Specialist is DTLR's first dedicated security role, owning day-to-day protection of our corporate offices, distribution operations and retail stores. You will turn security work that is currently spread across the infrastructure, identity and helpdesk teams into a single, measurable program.\nYou will focus on identity and endpoint security across Microsoft 365 and Entra ID, PCI DSS compliance for store payment systems, security monitoring and first-line incident triage alongside our incident response vendor, partnering with network engineers to strengthen network security, and security awareness for corporate and store employees. This is a hands-on role with room to shape policies, tooling and the roadmap as the program grows.\nResponsibilities:\nIdentity and access security\nAdminister and harden Microsoft Entra ID security: Conditional Access, MFA, privileged access (PIM), and identity protection risk policies.\nRun periodic access reviews for privileged accounts, service accounts, guest users and cross-tenant access.\nPartner with the helpdesk on secure onboarding, offboarding and account-recovery procedures.\nEndpoint, email and cloud security\nManage Microsoft Defender (Endpoint, Office 365, Identity and Cloud Apps) and Intune security baselines across Windows, mobile and Android store devices.\nTune email security, phishing protection and data loss prevention policies in Microsoft 365.\nTrack vulnerabilities and drive patch and remediation timelines with system owners.\nPayment and compliance\nOwn day-to-day PCI DSS compliance activities: scope tracking, quarterly scans, evidence collection and annual assessment support.\nHelp keep cardholder data environments segmented and minimized as store POS and payment systems change.\nMaintain security policies, standards and a risk register; support vendor security reviews.\nMonitoring, triage and vendor coordination\nMonitor security alerts from Defender and other tools; triage, investigate and resolve lower-severity findings in-house.\nEscalate major incidents to our outsourced incident response vendor and act as DTLR's primary technical liaison during their engagement.\nManage the vendor relationship: escalation criteria, contact paths, retainer terms and post-incident reviews.\nMaintain internal playbooks for the activities handled in-house and for the handoff to the vendor.\nWork with the infrastructure team to confirm backups are protected and recoverable (immutability, isolation, restore testing).\nNetwork security\nPartner with DTLR's network engineers to understand the corporate, store and distribution network architecture, including the Cloudflare services they manage.\nReview firewall, VPN, Wi-Fi, segmentation and Cloudflare configurations from a security perspective and recommend improvements.\nIdentify network security gaps and risks, and work with the network team to prioritize and track remediation.\nAssess security of new network, cloud and SaaS deployments before go-live.\nAwareness and enablement\nRun security awareness training and phishing simulations for corporate and store employees.\nServe as the escalation point for security questions from the helpdesk and business teams.\nReport program metrics and top risks to IT leadership monthly.\nRequired qualifications\n3+ years in IT, with at least 2 years focused on information security, systems administration or security operations.\nHands-on experience with Microsoft 365 and Entra ID security, including Conditional Access and MFA.\nWorking experience with an EDR/XDR platform, preferably Microsoft Defender.\nSolid understanding of networking fundamentals: TCP/IP, DNS, firewalls, VPNs and network segmentation.\nExperience investigating security alerts and documenting incidents.\nFamiliarity with PCI DSS or a comparable compliance framework (NIST CSF, CIS Controls, SOC 2).\nBachelor's degree in IT, cybersecurity or a related field, or equivalent experience.\nAbility to participate in an on-call rotation for security incidents.\nPreferred qualifications\nExperience in retail or another multi-site environment with point-of-sale and payment systems.\nExperience with Microsoft Sentinel or another SIEM, including writing KQL queries and detection rules.\nExperience securing Android or other mobile device fleets through Intune or a similar MDM.\nFamiliarity with Cloudflare security services (WAF, Zero Trust, DNS); exposure to Meraki or other cloud-managed network platforms.\nFamiliarity with backup security practices such as immutable storage and recovery testing.\nScripting skills in PowerShell or Python for automation and investigations.\nOne or more certifications: CompTIA Security+ or CySA+, Microsoft SC-200 or SC-300, SSCP, GIAC (GSEC, GCIH), or CISSP for senior candidates.\nSkills and competencies\nRisk judgment: weighs security against store operations and picks practical controls over perfect ones.\nClear communication: explains risks and incidents to executives, store managers and helpdesk staff in plain language.\nOwnership: sees issues through to closure and keeps documentation current.\nCalm under pressure: leads an orderly response during active incidents.\nCollaboration: works across infrastructure, identity, helpdesk, finance and loss prevention teams.\n Continuous learning: keeps up with threats targeting retail, payments and Microsoft environments.\nWorking conditions\nHybrid schedule (remote considered), with occasional travel to stores and distribution sites for assessments or incident response.\nParticipates in an on-call rotation and may work outside normal hours during incidents or maintenance windows.\nMust pass a background check due to access to sensitive systems and payment environments.\nCompensation: Pay range: $85,000-95,000 annually. This role will be eligible for the company 401K plan.\nGeneral Information:\nThe above statements are intended to describe the general nature and level of work being performed by individuals assigned to this position. They are not intended to be an exhaustive list of all duties, responsibilities, and skills required of personnel so classified.\nDTLR, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.","description_format":"text","description_chars":6683,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan","Continuous learning"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Gift Cards & Loyalty Programs","Forest Resources","Primary Education"],"lifecycle":[{"event":"open","at":"2026-11-06T22:33:34Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":23,"reasons":["conf:1","win:early","comp:junior,brand"],"computed_at":"2026-11-08T05:47:12Z"},"pay":{"stated_usd_annual":95000,"is_top_pay":true},"html_url":"https://alion.io/job/dtlr-it-security-specialist","json_url":"https://alion.io/job/dtlr-it-security-specialist.json","meta":{"generated_at":"2026-11-08T09:16:32Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20137,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2799680},"rest":"https://alion.io/mcp/rest/get_company?id=2799680"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fdtlr-it-security-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fdtlr-it-security-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fdtlr-it-security-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/dtlr-it-security-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fdtlr-it-security-specialist"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3894186}},{"tool":"search_jobs","arguments":{"company":"dtlr.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3894186},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}