Sr Engineers, Cybersecurity

About the role

T-Mobile is seeking a Sr. Engineer, Cybersecurity to join our team in Overland Park, KS. This role will lead security, compliance, and risk assessments on projects throughout the project lifecycle.

Responsibilities

• Improve process efficiency by creating and implementing creative and sustainable changes to existing deployment methodologies.
• Lead the identification of security needs & recommends plans/resolutions. Implements, tests & monitors info security improvements.
• Maintain visibility inside & outside of information security at the People management level.
• Interfaces with groups such as application support, engineering ops, finance, privacy, risk management, etc.
• Lead information security policy lifecycle throughout, including intake, creation, review, approval, implementation, publishing, communication & maintenance.
• Execute security projects driven by groups both internal and external to info security.
• Mentor peers and junior team members in security technologies, enterprise solution design and facilitation and effective customer interaction.
• Act as Subject Matter Expert in multiple facets of network & information security, including Firewall policy design, SSL Certificate management, vulnerability analysis & mitigation, and other topics as assigned.
• Lead the design and integration of IP/Security solutions within wireless network architectures, ensuring alignment with advanced cybersecurity standards and best practices.
• Analyze core technologies to identify threats and risks, and create detailed threat models outlining trust boundaries, threat agents, attack vectors, and safeguards to protect individuals, assets, data, and the T-Mobile brand.

Requirements

• Master’s degree in Computer Science, Information Technology, or related field, and 3 years of relevant work experience.
• Bachelor’s degree in Computer Science, Information Technology, or related field, and 5 years of relevant work experience.

Skills

• Managing and configuring Web Application Firewall (WAF) using Akamai and Imperva WAF to secure business-critical web applications against Open Web Application Security Project (OWASP) Top 10 vulnerabilities, Distributed Denial of Service (DDoS) attacks, volumetric attacks and other cyber threats;
• Monitoring realtime traffic patterns to identify anomalies and Advanced Persistent Threat (APT) with Akamai Web Security Analytics and iteratively fine-tuning WAF security configurations to minimize false positives while enhancing both performance and security;
• Performing security assessment using Dynamic Application Security Testing (DAST), Static Application Security Testing (SAST), Interactive Application Security Testing (IAST), Runtime Application Self-Protection (RASP) and Software Composition Analysis (SCA) through Burp Suite, ZAP, Postman, SonarQube, Contrast Security and OWASP Dependency-Check;
• Conducting mobile application security assessments by performing threat modeling using OWASP Mobile Application Security Verification Standard (MASVS) to uncover security flaws utilizing Mobile Security Framework (MobSF), NowSecure Platform, Frida, Android Studio and JADX;
• Managing cybersecurity platforms HackerOne and Bugcrowd, including setting up the program policies and scope, handling bug triage, validation, severity assessment via the Common Vulnerability Scoring System (CVSS) and overseeing bounty payments;
• Developing automation scripts on demand to streamline security processes related to WAF management and vulnerability detection using Bash, Go, Python, PHP, HTML and Postman;
• Implementing threat modeling techniques, including STRIDE, PASTA, TRIKE, ATTACK TREE, DREAD, KILL CHAIN, CAPEC, Mobile Application threat models, Cyber Threat Tree, or data flow diagrams to identify, assess and reduce security risks.

Qualifications

• Location: Overland Park, KS
• Telecommuting is permitted, but applicant must work from the worksite location at least 3-4 days per week. No additional national or international travel is anticipated.
• This position is eligible for the employee referral program.
• At least 18 years of age
• Legally authorized to work in the United States

Benefits

• Annual bonus or periodic sales incentive or bonus, based on role.
• Medical, dental and vision insurance.
• A flexible spending account.
• 401(k).
• Employee stock grants.
• Employee stock purchase plan.
• Paid time off.
• Up to 12 paid holidays.
• Family building benefits.
• Childcare subsidy.
• Tuition assistance.
• College coaching.
• Short- and long-term disability.
• Voluntary AD&D coverage.
• Voluntary accident coverage.
• Voluntary life insurance.
• Voluntary disability insurance.
• Voluntary long-term care insurance.
• Mobile service & home internet discounts.
• Pet insurance.
• Access to commuter and transit programs.

Pay

$129,217.62 - $152,300 per year.

Schedule

40 hours/week.