Principal Engineer, Cybersecurity

At T-Mobile, we invest in YOU!  Our Total Rewards Package ensures that employees get the same big love we give our customers.  All team members receive a competitive base salary and compensation package - this is Total Rewards. Employees enjoy multiple wealth-building opportunities through our annual stock grant, employee stock purchase plan, 401(k), and access to free, year-round money coaches. That’s how we’re UNSTOPPABLE for our employees!

Job Overview
The Cybersecurity Principal Engineer will help ensure that our software, systems and infrastructure are designed and implemented to the highest security standards. Performs technical security assessments, code reviews and vulnerability testing to highlight risk and remediate associated findings while helping T-Mobile teams and partners improve security. Works closely with other T-Mobile Engineers to design and build proactive methods to enhance our security posture.
This position serves as a subject matter expert which drives vision and results to enhance security posture within mobile device, IoT device, enterprise line of business applications, cloud, big data, Identity and core and carrier network technologies as well as and other business units as needed. Principal security advisor to cross-functional teams for the successful delivery of projects or services to enterprise customers.

Job Responsibilities:​

• Optimizes cross-functional partnership to successfully address customer requirements. Leads / organizes large scale analysis efforts spanning multiple departments. Uses internal and external data resources to make strategic business decisions and persuade others. Collaborates and builds long-term relationships with key partners. Anticipates likely stakeholder responses to specific recommendations and can address accordingly.
• Leads information security review of new technologies, designs, and remediation planning efforts.
• Collaborates with Engineering & Operations Teams to address security vulnerabilities found via PSIRTs, scans or breaches.
• Proactively identifies process or technology improvements within existing legacy applications or infrastructure and seeks out remediation.
• Investigates and/or leads identifying security needs & recommends plans/resolutions. Implements, tests & monitors info security improvements.
• Maintains visibility inside & outside of information security at the Executive (Director/Sr Director) level. Interfaces with groups such as application support, engineering ops, finance, privacy, risk management, etc.
• Significant experience with the analysis of underlying technologies that form the solution necessary for the application of threat identification, analysis, and thread model design. The threat model depicts trust boundary, threat agent(s), threat vector(s), and safeguard(s) necessary to protect person, asset, data, and T-Mobile brand.
• Proactively identifies areas that need to be developed and seeks out expertise in those areas. Keeps abreast of current developments and trends and can use this knowledge to create a business case to address major issues and create specific action plans to address the gaps that the team controls. Plays a leadership role in the execution of that action plan.
• Leads security projects driven by groups both internal and external to info security.
• Mentors, peers and junior team members in security technologies, enterprise solution design, SDLC facilitation and effective customer interaction
• Significant experience with implementation of various threat modeling approaches pertaining to one or more of the following STRIDE, PASTA, TRIKE, ATTACK TREE, DREAD, KILL CHAIN, CAPEC, Mobile Application threat model, Cyber Threat Tree, and data flow diagram.
• Advanced understanding of IP/Security solutions & technologies applicable to the Wireless Network Architecture.
• Also responsible for other Duties/Projects as assigned by business management as needed.

Qualifications:

Education:

• Bachelor's Degree, Computer Science, or Information Technology (required). Relevant experience in lieu of degree might be considered.

Experience:

• 7-10 years’ Experience with increasing responsibility with security related software and/or business process design (Required)
• 4-7 years’ Experience with the following: project/team lead, formal implementation SDLC, facilitation of cross-functional solution design teams.
• 4-7 years’ Technical Project Management
• Previous Leadership experience
• Be subject matter expert in multiple security subject areas.
• Experience with high level design architecture, security technologies, networking, web services and SOA.
• Subject matter expert in all facets of network & information se