Sr Engineer, Cybersecurity - Telecom

Are you ready to make a difference at the new T-Mobile? Then come join our team as a Sr Cybersecurity Engineer - Telecom!This Sr Cybersecurity Engineer will help the 5G core and carrier network technology Engineering and Operations teams to ensure our software, systems and infrastructure are designed and implemented to the highest security standards. Performs technical security assessments, code reviews and vulnerability testing to highlight risk and remediate associated findings while helping T-Mobile teams and partners improve security. Works closely with other T-Mobile Engineers to design and build proactive methods to improve our security posture.This position serves as a Subject Matter Expert (SME) who executes vision and drives efforts to improve security posture within carrier network technologies, mobile devices, IoT devices, big data, and other business units as needed. Senior security SME to cross-functional teams for the successful delivery of projects or services to enterprise customers. Collaborates with Engineering and Operations Teams to address security vulnerabilities, scans or breaches. Drives and supports network security best practices.Responsibilities

• Optimizes cross-functional partnership to successfully address customer requirements. Supports large scale design efforts spanning multiple departments. Uses internal and external data resources to support strategic business decisions by persuading others.
• Collaborates and builds long-term relationships with key stakeholders. Anticipates likely stakeholder responses to specific recommendations and suggests and pursues the execution of solutions
• Leads information security design of carrier network technologies, as well as remediation planning efforts
• Defines security requirements and test cases for 5G technology deployment. Follows up with test execution and liaises with vendor for remediations
• Analyzes new security threats and vulnerabilities and collaborates with Partner teams to address them
• Proactively identifies process or technology improvements within existing legacy applications or infrastructure and seeks out remediation
• Investigates and/or leads identification of security gaps and recommends plans/resolutions. Implements, tests and monitors information security improvements
• Demonstrates threat modelling experience using various methodologies. The threat model depicts trust boundary, threat agent(s), threat vector(s), and safeguard(s) necessary to protect person, asset, data, and T-Mobile brand
• Learns quickly and is curious about technologies. Keeps abreast of current cellular technologies
• Leads security projects driven by groups both internal and external to information security

• CISSP and/or CSA certification and/or relevant security experience
• Understanding of large-scale wireless design tailored for availability and performance with 5+ years' experience in Engineering and/or Operations of wireless carrier networks (Preferred)
  • 2+ years of experience with increasing responsibility with security
  • 3+ years experience Engineering and/or Operations of wireless carrier networks preferred
• 2+ years of IT infrastructure proficiency
• Strong understanding of Core Network (EPC and/or 5GC) and Radio Access Network (E-UTRAN and/or NR)
• Experience working for a large enterprise organization
• Experience with IP Multimedia Subsystem (IMS), LTE and/or 5G technologies
• Understanding of standardization bodies such as 3GPP, IETF, and GSMA
• Experience defining design, delivery and test cases
• Experience with industry standard threat analysis processes (e.g. PASTA, STRIDE or DREAD)
• Knowledge and experience delivery solutions based on OWASP and NIST criteria
• Hands on experience in delivering microservices, virtualization and containers (Kubernetes, Docker etc.)
• Proven ability to assess, influence, recommend, deploy and integrate Information Security solutions
• Strong analytical and problem solving/troubleshooting skills
• Strong verbal and communication skills with diverse cross functional groups and the ability to present effectively to small and large groups
• Self-driven and hands on worker
• Strong organizational skills, allowing for ownership and accurate tracking and documentation of projects
• Familiarity with current legal and regulatory requirements around information security and privacy, including PCI, SOX, CPNI, etc.
• CISSP, CSA, and a computer science background preferred
• Available for work in Bellevue, WA (Factoria), Overland Park, KS; Frisco, TX

• Bachelor's Degree in Computer Sciences or related field preferred, but may be substituted by relevant work experience
• Telecom experience in Core Network and/or Radio Access Network