Principal Cybersecurity Engineer, Telco

At T-Mobile, we invest in YOU!  Our Total Rewards Package ensures that employees get the same big love we give our customers.  All team members receive a competitive base salary and compensation package - this is Total Rewards. Employees enjoy multiple wealth-building opportunities through our annual stock grant, employee stock purchase plan, 401(k), and access to free, year-round money coaches. That’s how we’re UNSTOPPABLE for our employees!

Job Overview
This role involves securing critical telecommunications technologies, including 3GPP standards, IMS, packet core, messaging, e911, and 5G networks, while leveraging modern practices like zero-trust architecture, containerization, and advanced threat detection. The engineer collaborates with cross-functional teams to assess and mitigate risks, ensuring a secure environment for enterprise applications, IoT, mobile devices, and next-generation networks. The role works with engineering teams to implement security measures for technologies including mobile devices, cloud services, and networks. Success is measured by the effectiveness of security controls and the reduction of vulnerabilities. The work enhances organizational resilience against cyber threats and safeguards critical business operations and customer data.

Job Responsibilities:

• Conducts security assessments, code reviews, and vulnerability testing to identify and mitigate risks
• Develops proactive security measures and strategies to enhance the security posture across various technologies
• Collaborates with engineering teams to integrate security practices into software development and deployment processes
• Serves as a subject matter expert in cybersecurity, providing guidance and leadership to various business units
• Ensures the security of 3GPP-compliant systems, including LTE, 5G, and IMS core networks
• Evaluates new technologies and processes for potential security vulnerabilities and recommends corrective actions.
• Develops and implements cybersecurity solutions for packet core infrastructure, including EPC, UPF, and related network elements.
• Drives strategic security initiatives to protect against cyber threats and ensure compliance with security standards.
• Leads security design and implementation for critical services like e911, VoLTE, RCS messaging, and SMS/MMS platforms.
• Secures signaling protocols (e.g., Diameter, SIP, HTTP/2) and mitigate risks such as signaling fraud, DoS attacks, and SS7 vulnerabilities.
• Also responsible for other duties/projects as assigned by business management as needed

Education and Work Experience:

• Bachelor's Degree plus 7 years of related work experience OR Advanced degree with 5 years of related experience (Required)
• Acceptable areas of study include Computer Science or Information Technology. (Required)
• 7-10 years Conducting security assessments and vulnerability testing to identify and mitigate risks in digital environments (Preferred)
• 7-10 years Developing and implementing cybersecurity measures across various technologies including mobile and IoT devices, cloud services, and network technologies, e911, VoLTE, IMS Core and RAN. (Preferred)
• 7-10 years Leading and collaborating with engineering teams to enhance security postures and strategic cybersecurity initiatives (Preferred)

Knowledge, Skills and Abilities:

• Proven expertise in 3GPP standards, 5G architecture, IMS core, and packet core security. ​
• Artificial Intelligence (AI) (Required)
• Cybersecurity (Required)
• Escalation Management (Required)
• Security Automation (Required)
• Security Engineering (Required)
• Security Incident Management (Required)
• Stakeholder Management (Required)
• Threat Modeling (Required)

Licenses and Certifications:

• Certified Information Systems Security Professional (CISSP) An advanced-level certification for IT pros serious about careers in information security. Offered by (ISC)², CISSP is designed to prove expertise in designing, implementing, and managing a best-in-class cybersecurity program. (Preferred)
• Certified Information Security Manager (CISM) Offered by ISACA, this certification is for management-focused IT professionals who are tasked with managing, designing, overseeing, and assessing an enterprise’s information security. (Preferred)
• Certified in Risk & Informaitonal Systems Control (CRISC) Also by ISACA, CRISC is designed for IT professionals, project managers, and others whose job it is to identify and manage risks to IT and the business. (Preferred)

• At least 18