Telecom Product Security Engineer

Join our team and help shape the future of connectivity indoors and outdoors. Together, let's push the boundaries of technology and advance sustainable networks worldwide.

How You'll Help Us Connect the World :

We are seeking a skilled and experienced Telecom Security Engineer to lead and enhance security measures across the infrastructure of our DAS and RAN products, while also operationalizing and upholding security measures and policies defined by ANDREW's security team.

This role focuses on securing 4G / 5G components and their management systems, ensuring compliance with telecom security standards, as well as the security requirements from operators and customers. It also involves detecting vulnerabilities and working closely with operators, vendors, and internal SW and HW development teams. As a Principal Product Security Engineer, you will be responsible for the security aspects of the RAN and DAS products as part of the ICN business unit of ANDREW. While preference for this role is onsite in Nashua, New Hampshire, Richardson, Texas, or Lynchburg, Virginia, we are open to remote for the right candidate .

You Will Make an Impact By :

• Designing and defining security policies and requirements for RAN and DAS systems.
• Architect secure environments across Linux / Windows systems, Kubernetes, and container platforms. Implement least privilege access, strong authentication, and patch management.
• Performing risk assessments, threat modeling, and vulnerability analysis on RAN elements and AWS cloud hosting.
• Preparing responses to customer security requirements and questionnaires.
• Collaborating with engineering teams to ensure security is embedded in network design and deployment.
• Monitoring for and responding to security incidents involving RAN equipment and interfaces.
• Validating the security of vendor software / hardware and ensuring adherence to 3GPP, NIST, and GSMA standards.
• Defining and enforcing security configurations (e.g., secure boot, firmware validation, secure signaling).
• Engaging in penetration and other security testing, evaluating and prioritizing security vulnerabilities.
• Engaging with security test houses and evaluating their test plans and test reports.
• Working with internal and external stakeholders on compliance audits and regulatory requirements (e.g., O-RAN, RED, NESAS, NCSC, GDPR).
• Developing tools / scripts to automate RAN security monitoring, cloud infrastructures, vulnerability management, system audits, security baselining and reporting.
• Staying up-to-date with emerging threats and mitigation strategies specific to telecom infrastructure.
• Implementing and maintaining security policies and configurations for AWS cloud infrastructure in alignment with Andrew's security team directives and governance frameworks
• Applying and operationalizing the policies, standards, and controls designed by the central security team and ensuring alignment across product security implementations.

Required Qualifications for Consideration :

You Will Excite Us If You :

Why ANDREW?

Explore exciting career opportunities at ANDREW, part of the Amphenol family. With a legacy of over 85 years in wireless innovation, we empower mobile operators and enterprises with cutting-edge solutions. ANDREW, an Amphenol company, is proud of our reputation as an excellent employer. Our focus is to provide the highest level of support and responsiveness to both our employees and our customers, the world's largest technology companies. ANDREW offers the opportunity for career growth within a global organization. We believe that our company is unique in that every employee, regardless of his or her position, has the ability to positively impact the business.

ANDREW is an "Equal Opportunity Employer" - Minority / Female / Disabled / Veteran / Sexual Orientation / Gender Identity / National Origin.

For additional company information, please visit our website at https : / / www.andrew.com.

#LI-Remote

#LI-JT1