About the position
This position requires office presence of a minimum of 5 days per week and is only located in the location(s) posted. No relocation is offered. Join AT&T and reimagine the communications and technologies that connect the world. Our Chief Security Office ensures that our assets are safeguarded through truthful transparency, enforce accountability and master cybersecurity to stay ahead of threats. Bring your bold ideas and fearless risk-taking to redefine connectivity and transform how the world shares stories and experiences that matter. When you step into a career with AT&T, you won't just imagine the future-you'll create it. Responsible for cyber security areas across products, services, infrastructure, networks, and/or applications while providing protection for AT&T, our customers and our vendors/partners. Works with senior team members on various projects relating to the protection of devices, customers, assets, data, information technology, and networks.
Responsibilities
- Network security architecture - building secure designs around network features
- Lawful intercept, Netflow, TACACS (AAA)
- NIST Cyber pillars - can run with security assessments
- Work on architecture standards with labs and standards bodies
- Appliance hardening
- Good understanding of hardware and supply chain security
- Author Cybersecurity policy and standards
- Capability to determine risks and introduce robust controls for telecom wireline/wireless networks
- Perform research on network vulnerabilities and PEN testing to pro-actively determine security flaws (PSIRTs) on various network equipment from vendors such as: Nokia, Ericsson, Cisco and Juniper
- Triage threat actor activities by evaluating - network devices/servers, perform forensics, syslog, packet meta-data analysis etc.
- Implement security controls, policies and standards for core network that cover: Routing security, network compartmentalization etc., to reduce cyber risks and increase security controls to the core telecom network
Requirements
- Preferred Masters degree in Cyber Security, Engineering, or Computer Science
- Requires 10+ years of related experience
- Familiarity with large scale packet networks, and advanced router functions
- Knowledge of network security principles including control plane, data plane and element security
- Familiarity with IP standards and protocols
- Experience with technical discussions/negotiations with vendors
- Experience working with development teams and providing guidance for lab proof of concept work and testing teams
- Advanced knowledge of Linux
- Network elements such as: Juniper router, Cisco routers, Palo Alto Firewall, SRX Firewall, Network Security, Access control lists, BGP route controls and router protection techniques
- Advanced Cyber security knowledge and specifically hands-on expertise in perimeter security, network isolation (Firewalls/ACLs), appliance hardening, BGP security, PEN testing and vulnerability management of carrier grade routers and mobility network functions
- Hands-on experience with network security including Incident management, cyber investigations, vulnerability remediation, red team exercises, network segmentation and AAA
- Cyber security education and/or certifications desired
Benefits
- Medical/Dental/Vision coverage
- 401(k) plan
- Tuition reimbursement program
- Paid Time Off and Holidays (based on date of hire, at least 28 days of vacation each year and 9 company-designated holidays)
- Paid Parental Leave
- Paid Caregiver Leave
- Additional sick leave beyond what state and local law require may be available but is unprotected
- Adoption Reimbursement
- Disability Benefits (short term and long term)
- Life and Accidental Death Insurance
- Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
- Employee Assistance Programs (EAP)
- Extensive employee wellness programs
- Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T phone
