Responsibilities
- Lead comprehensive security risk evaluations and consulting engagements for telecom operators, technology vendors, and critical infrastructure initiatives, covering areas such as security architecture, radio access networks, operations support systems, multi-operator core networks, IP multimedia subsystems, and 5G core networks.
- Establish assessment boundaries, develop threat models, and define risk analysis frameworks; convert technical observations into clear risk statements and prioritized remediation plans.
- Review system architectures and design implementations across 2G, 3G, 4G, 5G, IMS, EPC/5GC, RAN and OpenRAN, OSS/BSS, interconnect systems, roaming infrastructures, cloud-native environments using Kubernetes or OpenStack, wireline networks, and operational and IT systems.
- Evaluate the effectiveness of security controls and alignment with industry standards including GSMA, 3GPP, NIST, and ISO, focusing on identity management, cryptographic key handling, encryption methods, secure boot processes, supply chain integrity, and operational safeguards.
- Examine signaling protocols and network interfaces such as SS7, Diameter, GTP, SIP/IMS, SIGTRAN, and HTTP-based APIs to detect exposure risks, configuration flaws, and systemic vulnerabilities.
- Assess platform security for telecom cloud environments, including multi-tenancy isolation, network segmentation, service mesh configurations, identity and access management, secrets handling, CI/CD pipelines, and container security hardening.
- Perform validation activities based on evidence, including configuration audits, log analysis, traffic inspection, and targeted fuzzing or abuse-case testing; collaborate with research and development teams on complex technical challenges.
- Develop and deliver high-quality documentation such as executive summaries, technical appendices, risk registers, assessment reports, and presentations, ensuring consistency and repeatability across projects.
- Assist in pre-sales activities and customer workshops by defining requirements, estimating project effort, contributing to proposals, and articulating assessment scope and business value.
- Guide junior team members and enhance internal capabilities by contributing to knowledge repositories, assessment methodologies, and reusable tools and automation.
Work Arrangement
Hybrid — Paris, France
Headquarters
Paris, France
Remote Policy
Flexible remote work with periodic meetups for collaboration and team bonding
