About the Company
ASOS is a global fashion destination for 20-somethings, offering a vast array of brands and our own label products through an innovative e-commerce platform. We’re driven by technology, data, and a passion for fashion, constantly pushing boundaries to deliver the best shopping experience. Our commitment to innovation extends to our robust cybersecurity practices, ensuring the safety and privacy of our customers’ data and our platform’s integrity.
Job Description
We are seeking a highly motivated and detail-oriented Shopify Security Analyst to join our dynamic cybersecurity team. In this critical role, you will be responsible for protecting ASOS’s e-commerce operations on the Shopify platform. You will identify, analyze, and mitigate security risks, ensuring the confidentiality, integrity, and availability of our customer data and transactional systems. This position offers a unique opportunity to work at the intersection of e-commerce and cybersecurity, contributing directly to the trust and reliability of a leading global fashion retailer.
Key Responsibilities
- Conduct regular security assessments, penetration tests, and vulnerability scans of ASOS's Shopify storefronts and related integrations.
- Monitor security logs and alerts from Shopify and integrated systems, responding to incidents and anomalies in a timely manner.
- Develop and implement security policies, procedures, and best practices specifically tailored for the Shopify platform.
- Collaborate with development, operations, and e-commerce teams to integrate security into the Shopify development lifecycle (SDLC).
- Provide expert advice and guidance on secure configurations and third-party app vetting for Shopify.
- Manage security incidents, including investigation, containment, eradication, recovery, and post-incident analysis.
- Stay up-to-date with the latest Shopify security features, threats, and vulnerabilities, proposing proactive mitigation strategies.
- Educate and train internal teams on Shopify security awareness and best practices.
Required Skills
- Proven experience as a Security Analyst or similar role, with specific exposure to e-commerce platforms.
- Strong understanding of the Shopify platform, including its architecture, APIs, and security model.
- Proficiency in security tools and techniques, including vulnerability scanning, penetration testing, and SIEM platforms.
- Knowledge of web application security principles (OWASP Top 10) and common attack vectors.
- Familiarity with data privacy regulations (e.g., GDPR, CCPA) and PCI DSS compliance.
- Excellent analytical, problem-solving, and communication skills.
- Ability to work independently and collaboratively in a fast-paced environment.
Preferred Qualifications
- Bachelor's degree in Computer Science, Cybersecurity, or a related field.
- Relevant security certifications (e.g., CISSP, CISM, CompTIA Security+, CEH).
- Experience with cloud security principles (AWS, Azure, GCP) as they relate to e-commerce infrastructure.
- Scripting or programming skills (e.g., Python, Ruby, JavaScript) for automation and analysis.
- Previous experience with incident response in an e-commerce environment.
Perks & Benefits
- Competitive salary and annual bonus scheme.
- Generous pension scheme.
- 25 days holiday, plus bank holidays, with the option to buy or sell days.
- Life assurance and private medical insurance.
- Staff discount on ASOS products.
- Flexible hybrid working model.
- Access to training and development opportunities, including security certifications.
- Employee assistance program.
- On-site gym and wellness programs (where applicable).
How to Apply
If you are interested in this position, please click the "Apply Now" button below. To ensure your application is properly considered, please prepare the following:
- An up-to-date Resume or CV
- A brief cover letter summarizing your experience and motivation
Applications are reviewed on a rolling basis. Only shortlisted candidates will be contacted for an interview.
⚠️ Important Disclaimer
Welcome to Westford Trust. We publish job opportunities aggregated from public sources, employers, and job portals. We never charge any fees to access or use our website; all information is provided entirely for free.
Westford Trust does not directly offer or manage these positions, nor are we directly involved in the hiring process for the vacancies published on https://job.westfordtrust.com.
If you suspect a fraudulent listing or have any questions, please contact us at techturna@gmail.com.