AddressAt Frasers Group we’re rethinking retail. Through digital innovation and unique store experiences, we’re serving our consumers with the world’s best sports, premium and luxury brands globally. As a leader in the industry, we’re elevating the retail experience for our consumers through our collection of established brands, including Sports Direct, FLANNELS, USC, Frasers, and GAME.
IT at Frasers Group is delivered by the in-house team who are passionate about what they do and are not dependent on outsourced organisations to deliver the core systems. We present an ideal opportunity for someone who is passionate about technology and wants to deliver the absolute best that they can and keep innovation at the forefront. There is a wealth of opportunity for training as well as on the job learning.
Frasers Group prides itself on the use of cutting edge and innovative IT solutions, these help drive the business forward and are continuously looking at the benefits new technology can provide.
With our ongoing Expansion and Elevation Strategy, we are currently seeking a Senior Digital Platform Security Engineer to join our Digital Platform Security Team. With the Platform protecting over close to 50 websites alongside a near 4Bn annual turnover, ensuring these sites are secure as well as running optimally is our upmost importance. Our growing team of engineers is looking for the perfect colleague to help with the continuing growth as well as our technology transformation journey.
The role involves;
- Collaborating with network/security architects to design and implement complex and thorough solutions to support the business
- Own complex tasks in the backlog and deliver them routinely with no significant issues
- Drive solutions through experimentation and innovation as a culture
- Solve problems collaboratively and communicate decisions to stakeholders
- Deliver shift-left security capabilities to platform and product
- Creating standards for fellow members of staff to follow and abide by
Communication with clients and colleagues involved in provisioning activities is essential, therefore articulating in a clear written, verbal, or non-verbal manner is important.
This role is available on a hybrid basis, 3 days on-site and 2 days remote, at either our Shirebrook HQ or Manchester Trafford Wharf Office.
Required Certifications and Experience:
- F5 301A, 301B and/or 302
- Proven experience in the implementation of CDN tools, such as Akamai, although other platforms are considered and welcomed.
- Advanced practical knowledge of DNS/DNSSEC protocols and operations and experience of at least one type of DNS Software running on Linux systems (e.g. BIND, NSD, Unbound, PowerDNS)
- Hands-on experience managing security or observability platforms (Splunk, HoneyComb, ELK, or other SIEMs) to include log ingestion, message parsing, and development of high-fidelity detection rules and alerting.
- A solid networking background with experience in Internet Routing, DNS, Load balancing, CDN, WAF and DDoS prevention. Experience troubleshooting web transactions and API calls.
- Experience with cryptography, X509 certificates, signatures, securing TLS/SSL parameters and certificate pinning.
Desirable Technical Skills and Experience:
- Strong understanding of Kubernetes deployments and security requirements
- Strong understanding and ability to explain common security flaws and ways to address them (e.g. OWASP Top 10).
- Strong understanding of application security standards such as OWASP ASVS
- Knowledge of Automation/DevOps tools (eg: APIs, Python, Ansible, PowerShell etc) and an eye towards eliminating toil and iteratively improving automation of operational tasks.
- Strong data wrangling skills with the ability to analyse and visualize large JSON or CSV datasets and find and correlate anomalous behaviours across diverse sets of data.
- Basic Penetration testing skills, specifically internal penetration testing and API testing (using Burp suite…)
An opportunity like this at Frasers is for the fearless. The potential is massive, the experience unrivalled. To be able to make the most of it you need to live and breathe our principles:
- Think without limits and take the team with you
- Own it and back yourself
- Be relevant to people, partners and the planet
