Senior Telecom Offensive Security Engineer

• Perform end-to-end security assessments of telecom and mobile network infrastructure.
• Conduct penetration testing across 2G, 3G, 4G/LTE, and 5G environments.
• Execute offensive security engagements against Radio Access Network (RAN), Core Network, IMS, EPC, and cloud-native telecom platforms.
• Identify, validate, and demonstrate vulnerabilities affecting telecom technologies and services.
• Perform protocol-level security assessments for SS7, Diameter, GTP, SIP, and related telecom protocols.
• Conduct threat modeling and attack simulations against telecom infrastructure.
• Assess security risks across telecom services such as VoLTE, VoWiFi, IVR, messaging, and carrier applications.
• Develop automation scripts using Python or Bash to improve offensive security testing.
• Prepare detailed technical reports with remediation recommendations.
• Collaborate with engineering and architecture teams to improve the security posture of telecom environments.
• Stay updated with emerging threats, vulnerabilities, and offensive security techniques targeting telecommunications technologies.

• Mobile networks: 2G, 3G, 4G/LTE, 5G
• Network domains: RAN, Core Network, IMS, EPC
• Architecture & systems: OSS/BSS, NMS, Mobile Network Architecture
• Network elements: BTS, NodeB, eNodeB, gNodeB, HLR/HSS, MME/AMF, SMF/UPF, SGSN/GGSN, PCRF/PCF

• Services: VoLTE, VoWiFi, IVR, SMS, MMS, Carrier Voice Services
• Protocols: SS7, Diameter, GTP, SIP, 5G NR

• Telecom and mobile network security assessments
• Penetration testing, red teaming, and vulnerability research
• Threat modeling, attack simulation, and exploit development

• Security tools: Kali Linux, Metasploit, Burp Suite, Wireshark, Nmap, Nessus
• Programming: Python, Bash, PowerShell
• Security automation

• AWS, Azure
• Kubernetes and container security

The ideal candidate should have practical experience performing security assessments within telecom environmentsrather than administering enterprise security infrastructure.

Candidates should be able to demonstrate experience in:

• Telecom penetration testing and mobile network security
• Telecom protocol and infrastructure security (RAN, Core Network)
• Vulnerability research, exploitation, and attack simulation
• Security automation and scripting

• OSCP
• GPEN
• CEH
• CISSP
• Telecom Security certifications
• Experience with AI-driven security automation
• Experience working with telecom operators, equipment vendors, or product companies