Hatfield, England, GB (Hybrid)1 open job
Ocado Retail operates ocado.com, the UK's largest dedicated online supermarket, as an M&S and Ocado Group joint venture, plus Zoom by Ocado rapid delivery, running on e-commerce, Oracle Fusion ERP, Ocado Smart Platform and logistics technology.
Ocado Retail Limited runs ocado.com, the UK's largest dedicated online supermarket, as a joint venture between Marks & Spencer Group and Ocado Group. The operational surface is unusually wide for a retailer: more than 1 million active customers, around 50,000 products, over 80% UK population coverage, and seven distribution centres moving orders promised in one-hour windows. That means payment and personal data at scale, a live fulfilment stack, and a supply chain where an outage or a breach stops food from reaching doorsteps.
The technical domains a security team would have to reason about are concrete rather than abstract. E-commerce platform technology fronting the customer relationship; Oracle Fusion as the enterprise resource planning layer; Ocado Smart Platform supporting the online grocery operation and the roughly 50,000-product catalogue; logistics and delivery technology coordinating last-mile routes and one-hour windows; and Zoom by Ocado, the rapid and same-day service. Automated, technology-enabled fulfilment in the distribution centres adds an operational technology dimension alongside the usual cloud and enterprise estate.
Threat model, stated plainly: retail fraud and payment abuse against a high-volume checkout; credential stuffing and account takeover against a customer base well over a million; intrusion and data exposure across ERP, e-commerce, and fulfilment systems; and disruption to fulfilment and delivery, where the business metric is unforgiving - 99% of items delivered exactly as promised, on time and in full. The product range spans food and drink (including more than 7,000 M&S items), home, lifestyle, health and beauty, and clothing, so catalogue and supply-chain integrations with third-party producers and brands are part of the boundary too.
The company describes itself as service-oriented and convenience-driven: kitchen-table delivery, one-hour windows, rapid delivery. For security engineering work that translates into protecting availability and trust in a system that customers use routinely, across e-commerce, Oracle Fusion ERP, Ocado Smart Platform, and the logistics technology that ties them together - all within the United Kingdom.
