FTTH Security Expert

🔥 6 minutes ago

🌏 Anywhere in the World

⏳ Contract/Temporary

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 12%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

P1 Security

WebsiteLinkedInAll Job Openings

11 - 50 employees

Founded 2011

📡 Telecommunications

🔒 Cybersecurity

🔐 Security

💰 Seed Round on 2011-01

Telecommunications • Cybersecurity • Security

P1 Security is a leading company in mobile network security, providing solutions to defend against network cybersecurity threats and attacks. Founded in 2009, the company specializes in securing telecom protocols and offers products and services like intrusion detection systems, vulnerability scanning, and threat management. P1 Security assists operators, governments, and enterprises in securing their mobile infrastructure, particularly focusing on technologies from 2G to 5G.

📋 Description

• Plan and run scoped, authorized penetration tests of FTTH/PON infrastructure, including OLTs, ONTs/ONUs, ODN management systems, and customer premises equipment • Analyze GPON, XG-PON, XGS-PON, and NG-PON2 internals, including OMCI, PLOAM, ONT authentication, and provisioning • Perform firmware extraction and reverse engineering of CPEs and gateways • Assess UART/JTAG debug interfaces, hardcoded credentials, update mechanisms, and web/CLI management flaws • Assess subscriber provisioning and management systems including TR-069/CWMP, TR-369/USP, ACS/OSS/BSS integrations, and zero-touch provisioning • Review BNG/BRAS, PPPoE/IPoE, DHCP, RADIUS/AAA, VLAN segmentation, QoS, and subscriber isolation • Assess fixed–mobile convergence, including 5G FWA, shared core, shared OSS/BSS, unified identity, and billing • Review routers, switches, aggregation equipment, NMS/EMS, SNMP, NETCONF/YANG, SSH/Telnet, APIs, and privileged access against hardening baselines • Map attack paths using MITRE ATT&CK, GSMA FASG/FS.xx guidance, and MITRE FiGHT • Produce prioritized reports with proof-of-concept evidence, risk ratings, and actionable remediation • Present findings to stakeholders and support remediation verification and retesting • Contribute to internal tooling, test methodologies, lab environments, and reusable attack playbooks

🎯 Requirements

• Deep knowledge of fixed-line network architecture (FTTx, DSL, Coaxial) • Experience in security audit pentests on OT and IT infrastructure (mandatory) • Experience with Huawei, ZTE, Nokia, Ericsson, Calix, or Adtran FTTH equipment • Familiarity with 3GPP SCAS, GSMA NESAS, ISO/IEC 27001, NIST CSF, and ITU-T/BBF specifications • Experience in red teaming or adversary emulation against critical infrastructure • Fluent English speaker • French optional • Relevant certifications such as OSCP, OSEP, OSWE, OSED, GPEN, GXPN, GRID, CEH (Practical), eJPT/eCPPT, or CRTO • Telecom-specific training, such as GSMA, Black Hat/DEF CON telecom, or hardware trainings • Published research, CVEs, conference talks, or bug bounty history in telecom or embedded devices

🏖️ Benefits

• Fully remote work policy • Monthly meetups with department members • Entire team on-site gathering every two months • Flexible work arrangements supporting work-life balance

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume