Sr. Engineer, Cybersecurity - PKI
Company: T-Mobile
Location: Bothell
Posted on: May 2, 2024
Job Description:
Be unstoppable with us!T-Mobile is synonymous with
innovation-and you could be part of the team that disrupted an
entire industry! We reinvented customer service, brought real 5G to
the nation, and now we're shaping the future of technology in
wireless and beyond. Our work is as exciting as it is rewarding, so
consider the career opportunity below as your invitation to grow
with us, make big things happen with us, above all, #BEYOU with us.
Together, we won't stop!Job Overview
The Cybersecurity Engineer will help ensure that our software,
systems and infrastructure are crafted and implemented to the
highest security standards. Performs technical security
assessments, code reviews and vulnerability testing to highlight
risk and remediate associated findings while helping T-Mobile teams
and partners improve security. Works closely with other T-Mobile
Engineers to design and build proactive methods to enhance our
security posture.
This position is responsible for overseeing auditing, analyzing,
coordinating, and implementing security measures enhance security
posture within mobile device, IoT device, enterprise line of
business applications, cloud, big data, and core and carrier
network technologies as well as other business units as needed.
Collaborate with Engineering & Operations Teams to address security
vulnerabilities found via PSIRTs, scans or breaches. Also, drive
and support network security best practices.Job
Responsibilities:
- PKI Design and Implementation:* Design, implement, and maintain
the organization's PKI infrastructure.* Develop and implement
policies and procedures related to key management, certificate
issuance, and revocation.
- Certificate Lifecycle Management:* Manage the lifecycle of
digital certificates, including issuance, renewal, and revocation.*
Ensure the proper functioning of certificate authorities (CAs) and
registration authorities (RAs).
- Security and Compliance:* Ensure that the PKI infrastructure
stays in sync with security policies, industry standards, and
regulatory requirements.* Conduct regular security assessments and
audits to identify and address vulnerabilities.
- Fix and Support:* Provide technical support for PKI-related
issues and incidents.* Investigate and resolve problems related to
certificates, keys, and cryptographic operations.
- Integration with Systems and Applications:* Collaborate with
system administrators and developers to integrate PKI into various
systems and applications.* Ensure seamless integration with
authentication, authorization, and encryption mechanisms.
- Key Management:* Manage cryptographic keys used for encryption,
digital signatures, and other security mechanisms.* Implement and
enforce key management standard processes.
- Documentation and Training:* Create and maintain documentation
for PKI processes, configurations, and procedures.* Deliver
training to internal teams on PKI standard methodologies and
usage.
- Incident Response:* Develop and implement incident response
plans for PKI-related security incidents.* Participate in
post-incident analysis and implement improvements to prevent future
incidents.
- Leads security, compliance, and risk assessments on projects
throughout project lifecycle
- Improves process efficiency by crafting and implementing
creative and sustainable changes to existing deployment
methodologies.
- Leads the identification of security needs & recommends
plans/resolutions.
- Implements, tests & monitors info security improvements
- Maintains transparency inside & outside of information security
at the People management level.
- Collaborate with groups such as application support,
engineering ops, finance, privacy, risk management, etc.
- Leads information security policy lifecycle throughout,
including intake, creation, review, approval, implementation,
publishing, communication & maintenance
- Implements security projects driven by groups both internal and
external to info security
- Mentors peers and junior team members in security technologies,
enterprise solution design and facilitation and effective customer
interaction
- Experience with implementation of various threat modeling
approaches pertaining to one or more of the following STRIDE,
PASTA, TRIKE, ATTACK TREE, DREAD, KILL CHAIN, CAPEC, Mobile
Application threat model, Cyber Threat Tree, and data flow
diagram
- Authority in multiple facets of network & information security,
including Firewall policy design, SSL Certificate management,
vulnerability analysis & mitigation, and other topics as
assigned.
- Sophisticated understanding of IP/Security solutions &
technologies applicable to the Wireless Network Architecture.
- Experience with the analysis of underlying technologies that
form the solution vital for the application of threat
identification, analysis, and thread model design.
- The threat model depicts trust boundary, threat agent(s),
threat vector(s), and safeguard(s) vital to protect person, asset,
data, and T-Mobile brand.
- Education:
- Bachelor's Degree or equivalent experience Computer Science or
Information Technology. (Required)
- Work Experience:
- 4-7 years of demonstrated ability in info security technology
or related field
- Experience with incident handling for Security breaches.
- Expert in security subject areas
- 2-4 years Technical Project Management
- Experience with high level design architecture, security
technologies, Networking, web services and SOA. Understanding of
encryption, obfuscation, tokenization technologies
- Knowledge, Skills and Abilities:
- Medium to advance knowledge of Scripting tools
(Python/Perl/Shell/HTML/PHP)
- Knowledge of federal & compliance regulations e.g. SOX, PCI &
CPNI
- Familiarity with load balancers (ex - A10, F5), firewalls (ex -
CheckPoint), Venafi, MDM (ex - Mobile Iron), Cloud (ex - AWS,
Azure), Malware Protection (ex -FireEye), Advanced Persistent
Threats (ex - Damballa), Privileged Accounts (ex - CyberArk), SIEM
(ex - ArcSight), Log & Event (ex - Splunk), Intrusion IDS/IPS (ex -
Symantec) , Cloud Platform (ex - PCF, Docker), Scanning (ex -
Qualys), AppSec (ex - Veracode)
- Solid understanding of T-Mobile's network elements and how they
work together (EIT, Engineering & 3rd Party).
- Strong presentation skills to large and small audiences.
- In-depth knowledge of security standard methodologies in
large-scale environments
- Strong problem solving / troubleshooting skills
- Dedicated and able to work under tight timelines.
- Always act with tact and integrity, and communicate with a
variety of individuals in a positive and productive manner
- Strong verbal and interpersonal skills with diverse
multi-functional groups & the ability to present effectively to
small & large groups
- Knowledge of information security policies and regulatory
controls (per team function)
- Demonstrable knowledge of current technological trends and
developments in the area of info security
- Ability to plan, organize and prioritize tasks to complete
independently; Ability to work under pressure and meet tight
timelines
- Authority in many facets of network & information security,
including Firewall policy design, SSL Certificate management,
vulnerability analysis & mitigation, and other topics as
assigned.
- Licenses and Certifications:
- Certified Information Systems Security Professional (CISSP)
CISSP and/or CCSK and/or CCSP and/or CISA/CISM certification a plus
(Preferred)
- Certified Information Security Manager (CISM) (Preferred)
- Certified Information Systems Auditor (CISA) (Preferred)* At
least 18 years of age
* Legally authorized to work in the United States
Travel:
Travel Required (Yes/No):Yes
DOT Regulated:
DOT Regulated Position (Yes/No):No
Safety Sensitive Position (Yes/No):No
Washington Pay Range : $134,400.00 - $181,800.00The pay range above
is the general base pay range for a successful candidate in the
state listed. The successful candidate's actual pay will be based
on various factors, such as work location, qualifications, and
experience, so the actual starting pay may be above or below this
range. At T-Mobile, employees in regular, non-temporary roles are
eligible for an annual bonus or periodic sales incentive or bonus,
based on their role. Most Corporate employees are eligible for a
year-end bonus based on company and/or individual performance and
which is set at a percentage of the employee's eligible earnings in
the prior year. Certain positions in Customer Care are eligible for
monthly bonuses based on individual and/or team performance, while
Retail and Business Sales roles are eligible for monthly or
quarterly sales incentives. And since we are ALL owners, EVERY
employee at T-Mobile is eligible for an Annual Stock Grant.At
T-Mobile, our benefits exemplify the spirit of One Team, Together!
A big part of how we care for one another is working to ensure our
benefits evolve to meet the needs of our team members. Full and
part-time employees have access to the same benefits when eligible.
We cover all of the bases, offering---medical, dental and vision
insurance, a flexible spending account, 401(k), employee
stock---grants, employee stock purchase---plan, paid time off and
up to paid 12 holidays - which total about 4 weeks for new
full-time employees and about---2.5 weeks for new
part-time---employees annually - paid parental and family
leave,---family building benefits, back-up care, enhanced family
support, childcare subsidy,---tuition---assistance, college
coaching, short and long term disability, voluntary AD&D
coverage, voluntary accident coverage, voluntary life insurance,
voluntary disability insurance, and voluntary long-term care
insurance. We don't stop there- eligible employees can receive
mobile service & home internet discounts, pet insurance, and access
to commuter and transit programs! To learn about T-Mobile's amazing
benefits,---check out---.--- Never stop growing!T-Mobile doesn't
have a corporate ladder-it's more like a jungle gym of
possibilities! We love helping our employees grow in their careers,
because it's that shared drive to aim high that drives our business
and our culture forward.T-Mobile USA, Inc. is an Equal Opportunity
Employer. All decisions concerning the employment relationship will
be made without regard to age, race, ethnicity, color, religion,
creed, sex, sexual orientation, gender identity or expression,
national origin, religious affiliation, marital status, citizenship
status, veteran status, the presence of any physical or mental
disability, or any other status or characteristic protected by
federal, state, or local law. Discrimination, retaliation or
harassment based upon any of these factors is wholly inconsistent
with how we do business and will not be tolerated.Talent comes in
all forms at the Un-carrier. If you are an individual with a
disability and need reasonable accommodation at any point in the
application or interview process, please let us know by emailing
ApplicantAccommodation@t-mobile.com or calling 1-844-873-9500.
Please note, this contact channel is not a means to apply for or
inquire about a position and we are unable to respond to
non-accommodation related requests.
Keywords: T-Mobile, Seattle Hill-Silver Firs , Sr. Engineer, Cybersecurity - PKI, Engineering , Bothell, Washington
Didn't find what you're looking for? Search again!
Loading more jobs...