Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted yesterday

IT Security Specialist

jdgroupnam4,489 open roles

Pay
$85,000 – $95,000 a year
Where
DT: Corp Office
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowIT Security Specialistjdgroupnam · DT: Corp Office

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on jdgroupnam's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.5% of postings close within 7 days. Measured by our own scanner across the market. jdgroupnam postings stay open a median of 10 days.

Share of postings closed within
  1. 2.3%1 day
  2. 4.6%3 days
  3. 13.5%7 days
  4. 21.8%14 days
  5. 36.6%30 days
  6. 58.9%60 days
This job: posted yesterday

jdgroupnam median: 10 days open

The posting

The IT Security Specialist is DTLR's first dedicated security role, owning day-to-day protection of our corporate offices, distribution operations and retail stores. You will turn security work that is currently spread across the infrastructure, identity and helpdesk teams into a single, measurable program.

You will focus on identity and endpoint security across Microsoft 365 and Entra ID, PCI DSS compliance for store payment systems, security monitoring and first-line incident triage alongside our incident response vendor, partnering with network engineers to strengthen network security, and security awareness for corporate and store employees. This is a hands-on role with room to shape policies, tooling and the roadmap as the program grows.

Responsibilities:

Identity and access security

  • Administer and harden Microsoft Entra ID security: Conditional Access, MFA, privileged access (PIM), and identity protection risk policies.
  • Run periodic access reviews for privileged accounts, service accounts, guest users and cross-tenant access.
  • Partner with the helpdesk on secure onboarding, offboarding and account-recovery procedures.

Endpoint, email and cloud security

  • Manage Microsoft Defender (Endpoint, Office 365, Identity and Cloud Apps) and Intune security baselines across Windows, mobile and Android store devices.
  • Tune email security, phishing protection and data loss prevention policies in Microsoft 365.
  • Track vulnerabilities and drive patch and remediation timelines with system owners.

Payment and compliance

  • Own day-to-day PCI DSS compliance activities: scope tracking, quarterly scans, evidence collection and annual assessment support.
  • Help keep cardholder data environments segmented and minimized as store POS and payment systems change.
  • Maintain security policies, standards and a risk register; support vendor security reviews.

Monitoring, triage and vendor coordination

  • Monitor security alerts from Defender and other tools; triage, investigate and resolve lower-severity findings in-house.
  • Escalate major incidents to our outsourced incident response vendor and act as DTLR's primary technical liaison during their engagement.
  • Manage the vendor relationship: escalation criteria, contact paths, retainer terms and post-incident reviews.
  • Maintain internal playbooks for the activities handled in-house and for the handoff to the vendor.
  • Work with the infrastructure team to confirm backups are protected and recoverable (immutability, isolation, restore testing).

Network security

  • Partner with DTLR's network engineers to understand the corporate, store and distribution network architecture, including the Cloudflare services they manage.
  • Review firewall, VPN, Wi-Fi, segmentation and Cloudflare configurations from a security perspective and recommend improvements.
  • Identify network security gaps and risks, and work with the network team to prioritize and track remediation.
  • Assess security of new network, cloud and SaaS deployments before go-live.

Awareness and enablement

  • Run security awareness training and phishing simulations for corporate and store employees.
  • Serve as the escalation point for security questions from the helpdesk and business teams.
  • Report program metrics and top risks to IT leadership monthly.

Required qualifications

  • 3+ years in IT, with at least 2 years focused on information security, systems administration or security operations.
  • Hands-on experience with Microsoft 365 and Entra ID security, including Conditional Access and MFA.
  • Working experience with an EDR/XDR platform, preferably Microsoft Defender.
  • Solid understanding of networking fundamentals: TCP/IP, DNS, firewalls, VPNs and network segmentation.
  • Experience investigating security alerts and documenting incidents.
  • Familiarity with PCI DSS or a comparable compliance framework (NIST CSF, CIS Controls, SOC 2).
  • Bachelor's degree in IT, cybersecurity or a related field, or equivalent experience.
  • Ability to participate in an on-call rotation for security incidents.

Preferred qualifications

  • Experience in retail or another multi-site environment with point-of-sale and payment systems.
  • Experience with Microsoft Sentinel or another SIEM, including writing KQL queries and detection rules.
  • Experience securing Android or other mobile device fleets through Intune or a similar MDM.
  • Familiarity with Cloudflare security services (WAF, Zero Trust, DNS); exposure to Meraki or other cloud-managed network platforms.
  • Familiarity with backup security practices such as immutable storage and recovery testing.
  • Scripting skills in PowerShell or Python for automation and investigations.
  • One or more certifications: CompTIA Security+ or CySA+, Microsoft SC-200 or SC-300, SSCP, GIAC (GSEC, GCIH), or CISSP for senior candidates.

Skills and competencies

  • Risk judgment: weighs security against store operations and picks practical controls over perfect ones.
  • Clear communication: explains risks and incidents to executives, store managers and helpdesk staff in plain language.
  • Ownership: sees issues through to closure and keeps documentation current.
  • Calm under pressure: leads an orderly response during active incidents.
  • Collaboration: works across infrastructure, identity, helpdesk, finance and loss prevention teams.
  • Continuous learning: keeps up with threats targeting retail, payments and Microsoft environments.

Working conditions

  • Hybrid schedule (remote considered), with occasional travel to stores and distribution sites for assessments or incident response.
  • Participates in an on-call rotation and may work outside normal hours during incidents or maintenance windows.
  • Must pass a background check due to access to sensitive systems and payment environments.

#LI-DNI

Compensation: Pay range: $85,000-95,000 annually. This role will be eligible for the company 401K plan.

This job description is not intended to cover all aspects, duties, and/or responsibilities required of employees. Employees may be asked to perform additional duties outside of normal job scope on a temporary or permanent basis per company policy. ​The company reserves the right to modify this job description with or without notice.

EEO Statement:

The Finish Line, Inc. is an Equal Employment Opportunity employer and is committed to complying with all federal, state, and local EEO laws. The Finish Line, Inc. prohibits discrimination against employees and applicants for employment based on race or color, religion or creed, national origin, alienage or citizenship status, marital status, sex, pregnancy status, age, military status, disability, or any other characteristic or class protected by law. The Finish Line, Inc. provides reasonable accommodations in accordance with applicable laws, including for disabilities, pregnancy, and religious practices.

Need accessibility assistance to apply? Applicants who require accessibility assistance to submit an employment application can either call Finish Line at (317) 613-6890 or email us at [email protected]. A member of our Talent Acquisition team will respond as soon as reasonably possible. (This email address and phone number is only for individuals seeking accommodation when applying for a job.)

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against jdgroupnam's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on jdgroupnam's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    jdgroupnam's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.