Sr Engineers, Cybersecurity

Overview

At T-Mobile, we invest in YOU! T-Mobile is an "Un-carer" delivering an advanced 4G LTE and 5G network. The Sr. Engineers, Cybersecurity position is located in Overland Park, KS and will lead security, compliance, and risk assessments throughout the project lifecycle.

• Improve process efficiency by creating and implementing creative and sustainable changes to existing deployment methodologies.
• Lead the identification of security needs & recommend plans/resolutions. Implement, test & monitor info security improvements.
• Maintain visibility inside & outside of information security at the people-management level.
• Interface with groups such as application support, engineering ops, finance, privacy, risk management, etc.
• Lead information security policy lifecycle throughout, including intake, creation, review, approval, implementation, publishing, communication & maintenance.
• Execute security projects driven by groups both internal and external to info security.
• Mentor peers and junior team members in security technologies, enterprise solution design and facilitation and effective customer interaction.
• Act as subject-matter expert in multiple facets of network & info security, including firewall policy design, SSL certificate management, vulnerability analysis & mitigation.
• Lead the design and integration of IP/Security solutions within wireless network architectures, ensuring alignment with advanced cybersecurity standards and best practices.
• Analyze core technologies to identify threats and risks, and create detailed threat models outlining trust boundaries, threat agents, attack vectors, and safeguards to protect individuals, assets, data, and the T-Mobile brand.

• Master’s degree in Computer Science, Information Technology, or related field, and at least 3 years of relevant work experience.
• OR Bachelor’s degree in Computer Science, Information Technology, or related field, and at least 5 years of relevant work experience.

• Managing and configuring Web Application Firewall (WAF) using Akamai and Imperva to secure business-critical web applications against OWASP Top 10 vulnerabilities, DDoS attacks, and other cyber threats.
• Monitoring realtime traffic patterns to identify anomalies and APT with Akamai Web Security Analytics and iteratively fine-tuning WAF security configurations.
• Performing security assessment using DAST, SAST, IAST, RASP, and SCA through Burp Suite, ZAP, Postman, Sonar Qube, Contrast Security and OWASP Dependency-Check.
• Conducting mobile application security assessments by performing threat modeling using OWASP MASVS to uncover security flaws utilizing MobSF, Now Secure Platform, Frida, Android Studio and JADX.
• Managing cybersecurity platforms Hacker One and Bugcrowd, including setting up the program policies and scope, handling bug triage, validation, severity assessment via CVSS and overseeing bounty payments.
• Developing automation scripts on demand to streamline security processes related to WAF management and vulnerability detection using Bash, Go, Python, PHP, HTML and Postman.
• Implementing threat-modeling techniques, including STRIDE, PASTA, TRIKE, ATTACK TREE, DREAD, KILL CHAIN, CAPEC, Mobile Application threat-models, Cyber Threat Tree, or data flow diagrams.

• Location:
  
  Overland Park, KS.
• Telecommuting is permitted, but applicant must work from the worksite location at least 3-4 days per week. No additional national or international travel is anticipated.
• This position is eligible for the employee referral program.
• At least 18 years of age.
• Legally authorized to work in the United States.

• Annual base salary range: $ – $152,300.
• Base pay based on factors such as work location, qualifications, and experience.
• Eligible for annual bonus or periodic sales incentive or bonus, and an annual stock grant.

• 40 hours per week.

• No travel required.

T-Mobile USA, Inc. is an equal-opportunity employer. All decisions concerning the employment relationship will be made without regard to age, race, ethnicity, color, religion, creed, sex, sexual orientation, gender identity or expression, national origin, religious affiliation, marital status, citizenship status, veteran status, the presence of any physical or mental disability, or any other status or characteristic protected by federal, state, or local law.

Discrimination, retaliation or harassment based upon any of these factors is wholly inconsistent with how we do business and will not be tolerated.

Talent comes in all forms at the Un-carer. If you are an individual with a disability and need reasonable accommodation at any point in the application or interview process, please let us know by emailing Applic or calling  Please note, this contact channel is not a means to apply for or inquire about a position and we are unable to respond to non-accommodation related requests.