Job Summary
The Opportunity
At Telstra, our purpose is to build a connected future so everyone can thrive. As a Senior Security Engineer within Telco Network Security, you will play a critical role in protecting and securing Telstra’s mobile network platforms, helping deliver secure, resilient and compliant outcomes across our 5G Core, RAN, Telco Cloud and cloud-native network environments.
As a senior technical specialist and trusted security advisor, you will lead complex security engineering initiatives, influence design decisions, partner with vendors such as Ericsson, and work closely with engineering, operations, architecture, delivery and security teams to drive practical and measurable security outcomes across Telstra’s critical telecommunications infrastructure.
Key Responsibilities
Lead Security Engineering activities across 4G/5G Mobile Core, RAN, Telco Cloud and cloud-native network platforms.
Provide technical input into solution design, security architecture reviews, threat modelling, risk assessments and control validation activities.
Drive security uplift initiatives including platform hardening, vulnerability remediation, privileged access management, logging and monitoring improvements, and audit readiness.
Partner with vendors, including Ericsson, to review security designs, manage remediation activities and ensure security requirements are met.
Collaborate with engineering, operations, architecture, delivery and security teams to resolve complex security issues and deliver secure outcomes.
Lead assigned security projects and workstreams, managing delivery milestones, risks, dependencies and stakeholder engagement.
Develop and maintain security standards, engineering patterns, operational procedures and assurance documentation.
Support compliance, audit and regulatory activities through technical evidence, control validation and remediation planning.
Mentor team members and promote secure engineering practices, automation and continuous improvement.
About You
To be successful in this role, you will bring strong security engineering expertise combined with experience working across telecommunications, cloud-native and enterprise security environments.
You will have:
Extensive experience in Security Engineering within large-scale enterprise, telecommunications or critical infrastructure environments.
Strong understanding of 4G/5G mobile network technologies, including Mobile Core, RAN, Telco Cloud and cloud-native platforms.
Experience leading security assessments, threat modelling, control validation, vulnerability management and risk remediation activities.
Hands-on experience with Linux, Kubernetes, containers, virtualisation platforms and cloud technologies.
Exposure to automation and DevSecOps tooling including Ansible, Python, YAML, GitLab and CI/CD pipelines.
Experience working with security technologies such as CrowdStrike, Qualys, Aqua Security, CyberArk, Splunk, SIEM, EDR and XDR platforms.
Strong understanding of Identity and Access Management, least privilege principles, PKI, certificates, mTLS, encryption, API security, logging and monitoring.
Demonstrated ability to lead technical initiatives, influence stakeholders and deliver outcomes across complex environments.
Experience working with vendors and third-party providers to review designs, resolve issues and drive remediation activities.
Strong communication skills with the ability to translate complex technical risks into clear business outcomes.
Experience supporting audit, compliance and regulatory requirements within highly controlled environments.
Highly Regarded
Experience working within telecommunications or mobile network environments.
Exposure to Ericsson platforms and security solutions.
Knowledge of CNIS, ECCD, CCRC, CCSM, RAN Security or Telco Cloud environments.
Experience with OpenStack, VMware, AWS or Azure.
Understanding of SDN/NFV technologies and telecommunications networking concepts.
Knowledge of security frameworks including ISO 27001, NIST CSF, CIS Controls or Essential Eight.
Experience delivering large-scale security uplift or transformation programs.
Relevant industry certifications such as CISSP, CCSP, CKS, GIAC or equivalent.
Want to know if this job is worth applying to?
Australia
Hybrid