Principal Red Team Operator

Description

The company runs large networks that connect customers, and this team tests how well they hold up against attackers.

As a Principal Red Team Operator, you will find weaknesses and security gaps in the company's infrastructure, applications and processes before real attackers do.

You will copy realistic adversary techniques to test and strengthen the company's defenses, with a focus on keeping customer data and network infrastructure secure.

You will work with internal teams to simulate advanced persistent threats (APTs) and run red team engagements built around telecom-specific challenges.

The role calls for deep knowledge of telecom systems, including large enterprise networks, 4G and 5G wireless infrastructure and cloud platforms. Strong understanding of network equipment and networking protocols is required.

If you have deep mobile network experience and the right mindset, this role is a route into offensive security.

Responsibilities

• Run red team exercises that mirror realistic threats against telecom systems, including wired and wireless network infrastructure and the systems around it.
• Find, exploit and document vulnerabilities in critical telecom systems and infrastructure.
• Write detailed technical reports and short executive summaries covering findings, attack paths and recommended fixes.
• Work with the blue team to build detection and prevention measures based on what your exercises reveal.
• Keep up with current attack techniques, tactics and procedures (TTPs) used against telecom networks.
• Share insights with security and operations peers to improve the organization's security posture.
• You may be based at any US-based hub location of the company.

Requirements

• You need a bachelor's degree or 4+ years of work experience.
• You need 6+ years of relevant work experience.
• You need a strong understanding of 4G/5G core network architecture and the systems that support it.
• Even better: a degree in engineering, cybersecurity or computer science.
• Even better: strong knowledge of 4G/5G protocols and interfaces, including GTP, Diameter, SS7, S1-MME, S1-U, S11 and HTTP/2 Service-Based Architecture.
• Even better: knowledge of 3GPP standards for EPC, 4GCore, 5GSA, 5GCore, and 4G/5G radio access, VoLTE and VoNR.
• Even better: solid grounding in enterprise networking, including routers, switches, VPNs, load balancers, TCP/IP and Internet numbering (IP, ASN, CIDR, subnetting).
• Even better: strong Linux skills.
• Even better: strong coding and scripting skills in Python, Bash, PowerShell and similar, plus the ability to vet exploit code and understand what it does.
• Even better: knowledge of network architecture and cloud environments such as Kubernetes, OpenStack and OpenShift.
• Even better: an attacker's mindset and the ability to design new attack scenarios against telecom environments.
• Even better: strong communication and teamwork skills, with the ability to work with technical and non-technical stakeholders.
• Even better: certifications such as OSCP, OSCE or OSEP, or GIAC certifications such as GPEN, GXPN or GWAPT.
• Even better: familiarity with security challenges in running Internet-scale networks, wireless core components, cloud and edge computing.
• You can still apply if you do not meet every even better qualification.

Conditions

This is a hybrid role with a set work location that includes remote work and at least 3 days per week in the office, as set by your manager.

You are responsible for following the hybrid work policies.

Scheduled hours are 40 per week.

Benefits

• Benefits support your career and life outside work, including medical, dental and vision cover, short- and long-term disability, basic and supplemental life insurance, AD&D insurance, identity theft protection, pet insurance, and group home and auto insurance.
• A matched 401(k) savings plan.
• Up to 8 paid company holidays and up to 6 personal days per year.
• Paid parental leave, adoption assistance and tuition assistance, plus other incentives.
• Premium pay may be available depending on the role, such as overtime, shift differential, holiday pay and allowances.
• New hires receive up to 15 days of vacation per year, increasing with service.
• Part-time coverage varies, and some benefits may be available depending on individual circumstances.
• Base salary varies by location and by confirmed job-related skills and experience. This is an incentive-based role with potential to earn more.
• For part-time roles, pay is adjusted to the hours worked.
• For full-time roles, the salary range for the listed location is $120,500.00 to $231,000.00.