Senior Cybersecurity Engineer - SSPM/DSPM

At T-Mobile, we invest in YOU!  Our Total Rewards Package ensures that employees get the same big love we give our customers.  All team members receive a competitive base salary and compensation package - this is Total Rewards. Employees enjoy multiple wealth-building opportunities through our annual stock grant, employee stock purchase plan, 401(k), and access to free, year-round money coaches. That’s how we’re UNSTOPPABLE for our employees!

Job Overview
The Cybersecurity Engineer will help ensure that our software, systems and infrastructure are designed and implemented to the highest security standards. Performs technical security assessments and vulnerability testing to highlight risk and remediate associated findings while helping T-Mobile teams and partners improve security. Works closely with other T-Mobile Engineers to design and build proactive methods to enhance our security posture.

This position is responsible for overseeing auditing, analyzing, coordinating, and implementing security measures enhance security posture within T-Mobile data, SaaS, mobile device, IoT device, enterprise line of business applications, cloud, big data, and core and carrier network technologies as well as other business units as needed. Collaborate with Engineering & Operations Teams to address security vulnerabilities found via PSIRTs, scans or breaches. Also, drive and support network security standard processes.

Job Responsibilities

• Leads security, compliance, and risk assessments on projects throughout project lifecycle.
• Improves process efficiency by creating and implementing creative and sustainable changes to existing deployment methodologies.
• Leads the identification of security needs & recommends plans/resolutions.
• Implements, tests & monitors info security improvements.
• Maintains visibility inside & outside of information security at the People management level.
• Communicate with groups such as application support, engineering ops, finance, privacy, risk management, etc.
• Leads information security policy lifecycle throughout, including intake, creation, review, approval, implementation, publishing, communication & maintenance.
• Implements security projects driven by groups both internal and external to info security.
• Mentors, peers and junior team members in security technologies, enterprise solution design and facilitation and effective customer interaction
• The threat model depicts trust boundary, threat agent(s), threat vector(s), and safeguard(s) necessary to protect person, asset, data, and T-Mobile brand.
• Also responsible for other Duties/Projects as assigned by business management as needed.
• Assist the team as a technical administrator across the organization
• Complete research and remediation of folder and share permission issues, including end-user management notification.
• Coordinate remediation efforts with domain experts and owners
• Engage with end-users to help and training and troubleshooting where necessary
• Vendor management and effort coordination
• Ad hoc duties and accountabilities as directed by special projects
• Support, manage, implement, and design compliance and security solutions and infrastructure
• Track and report your work continuously (JIRA and Confluence) and provide weekly status reports on your projects/goals
• Participate in on-call rotation and be an escalation point for junior engineers
• Provide detailed Root Cause and Post-incident analyses
• Document processes, designs, configurations, lessons learned, improvements, etc.
• Follow the T-Mobile's Incident and Change Management procedure
• Recognize problems and opportunities, evaluate, innovate, and automate to address
• Develop goals, objectives, operational metrics, service catalogs, run books, development plans, and more to ensure we continually improve our service delivery to internal customers

Education and Work Experience

• Bachelor's Degree Computer Science or Information Technology or equivalent work experience
• 4-7 years Experience in info security technology or related field
• Experience with incident handling for Security breaches.
• Expert in security subject areas
• 2-4 years Technical Project Management
• Experience with high level design architecture, security technologies, Networking, web services and SOA. Understanding of encryption, obfuscation, tokenization technologies

Preferred Experience

• Previous experience managing, deploying, and designing the DSPM and/or SSPM solution (preferred Varonis and/or Obsidian)
• Proven Cloud server deployment and support experience

Knowledge, Skills and Abilities

• Ex