Lead Cybersecurity - Telecom Network Security Automation

This position requires office presence of a minimum of 5 days per week and is only located in the location(s) posted. No relocation is offered.

Join AT&T and reimagine the communications and technologies that connect the world. Our Chief Security Office ensures that our assets are safeguarded through truthful transparency, enforce accountability and master cybersecurity to stay ahead of threats. Bring your bold ideas and fearless risk-taking to redefine connectivity and transform how the world shares stories and experiences that matter. When you step into a career with AT&T, you won’t just imagine the future-you’ll create it.

We are seeking a Lead Cybersecurity Engineer to design, architect, and advance next-generation security engineering solutions for telecom network infrastructure. This role focuses on applying core engineering principles to develop scalable, resilient and AI-enabled security testing systems that protect complex, multi-vendor network environments.

The position is responsible for engineering security validation architectures, designing analytical testing frameworks, and developing intelligent threat-detection models that enhance the integrity and resilience of AT&T’s core network, infrastructure and platforms. The role requires deep expertise in network security engineering, protocol-level analysis and system design, combined with the ability to integrate AI/ML techniques into security engineering workflows.

Security Engineering Design, Architecture & AI/ML Job Description:

• Architect and design automated security validation frameworks to assess vulnerabilities and control effectiveness across large-scale telecom networks, including routers, switches, firewalls, and cloud platforms.
• Develop engineering models and methodologies for security testing, including threat simulation, failure analysis, and risk quantification across multi-vendor environments.
• Design and implement network security architectures and controls, including routing security (BGP, RPKI), DDoS mitigation, Control Plane Policing (CoPP), and segmentation strategies.
• Apply engineering analysis to evaluate system behavior under adversarial conditions, ensuring resilience against evolving threats and attack vectors.

• Engineer AI- and ML-based models for anomaly detection, behavioral analysis, and predictive risk scoring within network traffic and system telemetry.
• Integrate intelligent detection capabilities into security validation systems to enable proactive identification of threats and vulnerabilities.
• Research and evaluate emerging AI technologies to enhance security engineering approaches and continuously evolve system capabilities.

• Design and embed security validation architectures within CI/CD pipelines, enabling continuous engineering-driven security testing throughout the software and network lifecycle.
• Define engineering standards, validation checkpoints, and test frameworks for security across infrastructure and application deployments.
• Collaborate with internal engineering teams and vendors to standardize security engineering requirements and integration patterns.

• Apply deep expertise in telecom-grade networking systems (Cisco, Juniper, Arista, Whitebox platforms) to engineer secure configurations and controls.
• Analyze and secure routing protocols and network behaviors, including BGP stability, route validation, and mitigation of routing attacks (e.g., hijacking, leaks).
• Engineer solutions for large-scale, distributed network environments, ensuring performance, scalability, and security coexist.

• Perform detailed engineering analysis of test results, vulnerabilities, and threat trends, translating findings into actionable system improvements.
• Document and communicate engineering designs, test methodologies, and risk assessments to technical and executive stakeholders.
• Provide technical leadership and mentorship, guiding engineers on security architecture, engineering best practices, and analytical problem-solving.

• Partner with Red Teams, Blue Teams, and Incident Response organizations to incorporate real-world threat intelligence into engineering models and validation frameworks.
• Research adversarial tactics, techniques, and procedures (TTPs) and incorporate them into engineering-driven test case design.

• Develop and maintain automation scripts and tooling (Python, Ansible, EEM) to implement engineered security testing frameworks and workflows.
• Support system administration activities (Linux/Windows) as required to maintain testing platforms and environments.
• Build and maintai