Signalling Security Specialist

As a Telecom Signalling Security Analyst, you will combine customer-facing delivery with hands-on technical execution in sensitive telecom environments.

You will:

• Support and operate P1 Security solutions in production contexts (notably PTM and VKB).
• Conduct signalling security audits using proprietary tooling (notably PTA) and deliver rigorous, professional reports and presentations to customers.

This is a profile-focused role: we are looking for someone who can cover both audit delivery and operational support. Our teams are remote-first, with a preference for candidates who can overlap working hours with Central European Time.

• Act as a technical point of contact for customers: scoping, updates, and delivery.
• Deliver presentations, training, and debrief sessions.

• Contribute to audit scoping (objectives, perimeter, constraints, timelines, deliverables).
• Prepare safe execution plans and operational safeguards.
• Execute signalling security audits using PTA and associated tooling in a controlled manner.
• Analyze results, validate findings, and assess exploitability/root cause.
• Draft professional technical reports in English and present findings to customers.

• Provide IT support for the PTM IDS in the context of customer ticket workflows.
• Troubleshoot and maintain PTM deployments, including Linux and virtualization layers.
• Operate and improve day-to-day tooling/scripts used for investigations, maintenance, and deployments.

• Work closely with Engineering and R D to improve tooling, detection quality, and operational processes.
• Maintain clear internal documentation and handover notes.

• Technical writing (English): ability to draft professional, structured technical reports and slide decks
• Client communication: strong verbal communication skills for presenting and interacting directly with customers.
• Telecom core roaming security: solid understanding of telecom core architecture, roaming concepts, and where signalling security fits in real operator environments.
• Signalling protocols call flows (hands-on): ability to read and reason about SS7/SIGTRAN, Diameter, LTE/IMS and GTP-C call flows, and connect traces/observations to concrete security findings.
• Standards-driven audit mindset: familiarity with GSMA Fraud Security standards (notably FS.11, FS.19, FS.20) and ability to translate requirements into test cases, evidence collection, and actionable remediation.
• Roaming signalling security: mastery of roaming signalling attacks and call flows.
• Linux / terminal: comfortable using a terminal and basic Linux commands.
• Scripting
• Python:
  Proficiency in "quick scripting" mode :
  Ability to develop one-off analysis or testing scripts. No expectations regarding software architecture or code maint