Telecom Security Engineer

Job Summary

We are looking for a Telecom Security Engineer with strong hands-on knowledge of 2G/3G/4G/5G networks, RAN, EPC/5G Core, IMS/VoLTE, telecom signaling protocols, and telecom security.

The candidate should understand telecom network elements, their security requirements, and logging capabilities. The role will work closely with Telecom Network/OEM, Cybersecurity, SOC, and SIEM teams to enable centralized security monitoring of telecom infrastructure.

Role positioning: SIEM knowledge is highly preferred; however, the primary requirement is strong Telecom domain expertise with an understanding of security monitoring and log integration.

Key Responsibilities

• Understand end-to-end 2G/3G/4G/5G architecture, including RAN, EPC, 5G Core, IMS/VoLTE, and OSS/BSS.
• Work with telecom network elements including HLR, HSS, MSC, MME, SGW, PGW, AMF, SMF, UPF, PCRF/PCF, SBC, and IMS components.
• Apply knowledge of SS7, Diameter, GTP, SIP, and 5G Core/SBA protocols.
• Assess telecom security threats and vulnerabilities across Core, RAN, IMS, signaling, roaming, and interconnect environments.
• Identify security-relevant logs and events generated by telecom network elements and applications.
• Coordinate with OEM/vendor teams to enable appropriate security logging on telecom devices.
• Support onboarding of telecom devices and applications into the SIEM platform.
• Coordinate connectivity, routing, firewall, and log-forwarding prerequisites with relevant teams.
• Work with SIEM engineers on log validation, parsing, normalization, field mapping, and integration troubleshooting.
• Identify security-logging gaps and support remediation of missing, delayed, or incorrectly parsed events.
• Assist SOC/SIEM teams in defining telecom-specific security monitoring and detection use cases.
• Maintain telecom device inventory, logging requirements, integration details, and supporting technical documentation.
  
  

Mandatory Skills

• Strong understanding of 4G LTE and 5G architecture, including EPC and 5G Core.
• Knowledge of RAN architecture, IMS/VoLTE, and major Telecom Core network elements.
• Strong working knowledge of SS7, Diameter, GTP, and SIP.
• Understanding of telecom signaling security, network security, and security events.
• Hands-on telecom device and network troubleshooting experience.
• Knowledge of IP networking, TCP/IP, routing, DNS, and firewall fundamentals.
• Understanding of telecom network-element logs and device logging capabilities.
• Ability to collaborate across Telecom Network, OEM, Cybersecurity, SOC, and SIEM teams.
  
  

SIEM Knowledge - Highly Preferred

The candidate does not need to be a dedicated SIEM administrator, but should preferably understand:

• SIEM architecture and security-monitoring concepts.
• Telecom log-source onboarding and log collection/forwarding.
• Syslog and API-based integration concepts.
• Log parsing, normalization, validation, and security-event field mapping.
• Log-integration troubleshooting and data-quality validation.
• SIEM correlation, detection-use-case requirements, and SOC monitoring needs.
• Working knowledge of Splunk, Microsoft Sentinel, QRadar, FortiSIEM, or an equivalent SIEM platform.
  
  

Preferred OEM Experience

Ericsson | Nokia | Huawei | Cisco | Mavenir | Oracle

Preferred Qualifications

• Bachelor's degree in Telecommunications, Electronics, Computer Science, IT, Cybersecurity, or an equivalent discipline.
• 5-10 years of relevant Telecom or Telecom Security experience.
• Experience in Telecom Core, Network Security, Telecom SOC, or security-monitoring environments.
• Telecom 4G/5G, networking, cybersecurity, or SIEM-related certifications are advantageous.
  
  

Skills: architecture,telecom,integration,logging,siem,elements,security,soc,4g