Why we need this role?
This role is critical to protecting both internal telecom infrastructure and customer-facing security services. It ensures the secure deployment and management of technologies across backbone, edge, and cloud environments, while supporting the delivery and integration of managed security solutions for customers. The role plays a key part in incident response, vulnerability management, and maintaining robust security standards. By collaborating across engineering, operations, and product teams, it helps embed security into every layer of the network and service lifecycle, ensuring resilience, compliance, and customer trust.
What you will do:
Security Product Engineering (Customer-Facing Focus):
* Support deployment and integration of customer security products such as managed firewalls, SD-WAN, SASE platforms, and DDoS mitigation solutions.
* Perform configuration, troubleshooting, and tuning of security services in customer environments.
* Assist in onboarding, proof-of-concept testing, and support transitions to operations for customer security services.
* Work with solution architects to operationalize and maintain secure design patterns and templates.
Infrastructure Security (Internal Focus):
* Deploy and manage security technologies across the telecom backbone, edge, and data centre infrastructure (e.g., firewalls, IDS/IPS, SIEM, PAM, NAC).
* Collaborate with network and systems teams to secure IP/MPLS transport, SDN platforms, automation tools, and cloud workloads.
* Monitor and analyse security events and alerts, responding to incidents and escalating as appropriate.
* Assist with vulnerability assessments, patch management validation, and configuration hardening.
* Document and maintain infrastructure security standards, configurations, and runbooks.
Support & Collaboration:
* Participate in security incident response, root cause analysis, and remediation efforts.
* Provide input on threat modelling, security testing, and design reviews for internal and external services.
* Stay current on security threats, tooling, and telecom-relevant vulnerabilities.
* Collaborate cross-functionally with engineering, operations, product, and customer support teams.
What we’re looking for?
Must haves:
* Experience in security engineering and/or network engineering
* Solid understanding of TCP/IP, routing, firewalls, VPN, and network segmentation principles.
* Hands-on experience with security tools such as firewalls (Fortinet, Palo Alto, etc.), SIEM/SOAR, IDS/IPS, EDR, or vulnerability scanners.
* Familiarity with Linux, scripting (Python, Bash), and infrastructure-as-code concepts.
* Knowledge of secure configuration standards (e.g., CIS benchmarks) and common protocols (e.g., BGP, DNS, SNMP).
* Experience supporting or delivering telecom or ISP infrastructure.
* Exposure to customer-facing security services or managed security environments.
* Familiarity with regulatory and industry standards (e.g., NIST, ISO 27001, UK TSA).
* Certifications such as Security+, GSEC, GCIA, or equivalent are a plus.
* Telecom or carrier experience strongly preferred