Principal Engineer, Cybersecurity

T-Mobile•Bellevue, WA

1d•$127,800 - $230,700

About The Position

This role is critical for protecting digital assets by ensuring robust cybersecurity across software, systems, and infrastructure. It involves conducting device security assessments, code reviews, and vulnerability testing to identify and mitigate risks. The role collaborates with engineering teams and OEMs to implement security measures for mobile and IoT devices, including CPEs, hotspots, trackers, routers, and modems. Success is measured by the effectiveness of security controls and the reduction of vulnerabilities. The work enhances organizational resilience against cyber threats and safeguards critical business operations and customer data. The position leads device security assessments and penetration testing, develops security measures and strategies, and collaborates with engineering teams and OEMs to integrate security throughout hardware and software development and deployment. It also conducts digital forensics, drives strategic security initiatives, defines and evolves assessment methods and tooling, and mentors security engineers. Other duties or projects may be assigned by business management. The role requires a bachelor's degree plus seven years of related experience, or an advanced degree plus five years of related experience. Acceptable fields include Computer Science and Information Technology. Required experience includes hands-on device security assessments and testing, proficiency with security tools, and knowledge of 4G LTE and 5G architecture. Additional programming and automation experience, broader cybersecurity experience, and certain professional certifications are preferred. No travel is required.

Requirements

Bachelor's degree plus 7 years of related work experience, or an advanced degree with 5 years of related experience.
Degree in Computer Science, Information Technology, or another acceptable area of study.
3–5 years of hands-on experience conducting device security assessments and testing on IoT devices, routers, modems, or similar embedded platforms.
3–5 years of proficiency using security tools such as Ghidra, IDA Pro, dotPeek, Burp Suite, Nmap, hashcat, and OllyDbg.
3–5 years of hands-on knowledge of 4G LTE and 5G architecture (RAN and Core), including cloud environments and containerized applications.
Knowledge of artificial intelligence (AI).
Strong leadership skills to guide and mentor teams in achieving robust cybersecurity defenses.
Ability to collaborate with cross-functional teams to implement security measures.
Proficiency troubleshooting and resolving complex security issues.
Ability to develop and implement long-term security strategies aligned with business objectives.
Knowledge of cybersecurity, escalation management, security automation, security engineering, security incident management, stakeholder management, and threat modeling.
At least 18 years of age.
Legally authorized to work in the United States.

Nice To Haves

3–5 years of proficiency in Python, C++, C#, PHP, and shell scripting; experience building scalable systems and automating workflows; and familiarity with AI tools such as ChatGPT and Claude.
7–10 years conducting security assessments and vulnerability testing to identify and mitigate risks in digital environments.
7–10 years developing and implementing cybersecurity measures across mobile and IoT devices, cloud services, and network technologies.
7–10 years leading and collaborating with engineering teams to enhance security postures and strategic cybersecurity initiatives.
Certified Information Systems Security Professional (CISSP).
Certified Information Security Manager (CISM).
Certified in Risk & Information Systems Control (CRISC).

Responsibilities

Lead end-to-end device security assessments and penetration testing across IoT devices, CPEs, hotspots, trackers, routers, and modems to identify and mitigate risks.
Develop proactive device security measures, solutions, and strategies to enhance security across technologies.
Collaborate with device engineering teams and OEMs to integrate security practices into hardware and software development, including deployment processes.
Conduct digital forensics on compromised or suspect devices to determine root cause, scope, and attacker methodology, and partner with threat response teams.
Drive strategic security initiatives to protect against cyber threats and ensure compliance with security standards.
Define and evolve T-Mobile's device security assessment methodology, requirements, standards, and tooling roadmap.
Mentor and upskill junior and mid-level security engineers on device security techniques and best practices.
Perform other duties or projects as assigned by business management.

Benefits

Competitive base salary and compensation package.
Annual stock grant.
Employee stock purchase plan.
401(k).
Access to free, year-round money coaches.
Annual bonus or periodic sales incentive or bonus, depending on role and eligibility.
Medical insurance.
Dental insurance.
Vision insurance.
Flexible spending account.
Paid time off.
Up to 12 paid holidays.
Paid parental and family leave.
Family building benefits.
Back-up care.
Enhanced family support.
Childcare subsidy.
Tuition assistance.
College coaching.
Short- and long-term disability coverage.
Voluntary AD&D coverage.
Voluntary accident coverage.
Voluntary life insurance.
Voluntary disability insurance.
Voluntary long-term care insurance.
Mobile service and home internet discounts for eligible employees.
Pet insurance for eligible employees.
Commuter and transit programs for eligible employees.