Principal Engineer, Cybersecurity
Job Description
The Principal Engineer, Cybersecurity role at T-Mobile USA, Inc. focuses on protecting digital assets through comprehensive device security assessments, penetration and vulnerability testing, and security initiatives across software, systems, and infrastructure. This position is onsite in Frisco, TX and supports work across mobile and IoT device environments.
Location and Compensation
Location: Frisco, TX (onsite)
Salary Range: USD 127,800 to 276,840 per year
Total Target Cash Earnings Opportunity: USD 153,360 to 276,840
National Base Pay Range: USD 127,800 to 230,700
Education and Experience Requirements
- Required: Bachelor’s Degree plus 7 years of related work experience OR Advanced degree with 5 years of related experience
- Required: Acceptable areas of study include Computer Science or Information Technology
- Required: 3-5 years of hands-on experience conducting device security assessments and testing on IoT devices, routers, modems, or similar embedded platforms
- Required: 3-5 years of proficiency using security tools including Ghidra, IDA Pro, dotPeek, BurpSuite, Nmap, hashcat, OllyDbg, and similar tooling
- Required: 3-5 years of hands-on knowledge of 4G LTE and 5G architecture (RAN and Core), including cloud environments and containerized applications
- Preferred: 3-5 years of proficient experience in Python, C++, C#, PHP, and shell scripting, including experience building scalable systems and automating workflows; familiarity with AI tools (ChatGPT, Claude)
- Preferred: 7-10 years conducting security assessments and vulnerability testing to identify and mitigate risks in digital environments
- Preferred: 7-10 years developing and implementing cybersecurity measures across mobile and IoT devices, cloud services, and network technologies
- Preferred: 7-10 years leading and collaborating with engineering teams to enhance security postures and strategic cybersecurity initiatives
- Required: Artificial Intelligence (AI)
- Required: Leadership skills to guide and mentor teams in achieving robust cybersecurity defenses
- Required: Strong collaboration with cross-functional teams to implement security measures
- Required: Proficiency troubleshooting and resolving complex security issues
- Required: Strategic thinking to develop and implement long-term security strategies aligned with business objectives
- Required: Cybersecurity; Escalation Management; Security Automation; Security Engineering; Security Incident Management; Stakeholder Management; Threat Modeling
- At least 18 years of age
- Legally authorized to work in the United States
Responsibilities
- Lead end-to-end device security assessments and penetration testing across IoT, CPEs, hotspots, trackers, routers, and modems to identify and mitigate risks
- Develop proactive device security measures, solutions, and strategies to improve the security posture across multiple technologies
- Collaborate with device engineering teams and OEMs to integrate security practices into hardware and software development, including deployment processes
- Conduct digital forensics on compromised or suspect devices to determine root cause, scope, attacker methodology, and partner with threat response teams
- Drive strategic security initiatives to protect against cyber threats and ensure compliance with security standards
- Define and evolve T-Mobile’s device security assessment methodology, requirements, standards, and tooling roadmap
- Mentor and upskill junior and mid-level security engineers on device security techniques and best practices
- Perform other duties or projects as assigned by business management
Technology and Tools
- Security tools: Ghidra, IDA Pro, dotPeek, BurpSuite, Nmap, hashcat, OllyDbg
- Scripting and programming: Python, C++, C#, PHP, shell scripting
- AI tools: ChatGPT, Claude
- Telecom and deployment environments: 4G LTE, 5G, RAN, Core, cloud environments, containerized applications
Benefits
- Competitive base salary and compensation package
- Annual stock grant
- Employee stock purchase plan
- 401(k)
- Access to free, year-round money coaches
- Medical, dental and vision insurance
- Flexible spending account
- Paid time off
- Up to 12 paid holidays
- Paid parental and family leave
- Family building benefits
- Back-up care; enhanced family support; childcare subsidy
- Tuition assistance; college coaching
- Short- and long-term disability
- Voluntary AD&D coverage; voluntary accident coverage; voluntary life insurance; voluntary disability insurance; voluntary long-term care insurance
- Mobile service & home internet discounts
- Pet insurance
- Access to commuter and transit programs
- Annual bonus or periodic sales incentive or bonus (eligible employees) and year-end bonus (corporate employees)
Certifications (Licenses and Certifications)
- Certified Information Systems Security Professional (CISSP) (Preferred)
- Certified Information Security Manager (CISM) (Preferred)
- Certified in Risk & Informational Systems Control (CRISC) (Preferred)
Travel and Safety Regulation
- Travel Required: No
- DOT Regulated Position: No
- Safety Sensitive Position: No