Principal Engineer, Threat Hunting

T-Mobile•Bellevue, WA

2d•$127,800 - $230,700

About The Position

The Principal Engineer, Threat Hunter serves on T-Mobile’s Continuous Hunting and Offensive Specialists (CHAOS) team, an offensive and defensive cybersecurity function. The role leads continuous, hypothesis- and intelligence-driven threat hunting, adversary emulation, and rapid-response vulnerability assessments across software, systems, and infrastructure to identify, validate, and drive remediation of risks before exploitation. The engineer works with engineering teams to implement security measures across mobile devices, cloud services, and networks, including security assessments, code reviews, and vulnerability testing. Success is measured by the effectiveness of security controls, the strength of detection and response capabilities, and reduced vulnerabilities. The work supports organizational resilience against evolving threat actors and protects business operations and customer data. The position requires a bachelor’s degree plus seven years of related experience, or an advanced degree plus five years of related experience. Acceptable areas of study include Computer Science or Information Technology. Preferred qualifications include seven to ten years of experience conducting security assessments and vulnerability testing; developing and implementing cybersecurity measures for mobile and IoT devices, cloud services, and networks; and leading or collaborating with engineering teams on security posture and strategic cybersecurity initiatives. CISSP, CCSK, CCSP, CISA, or CISM certification is a plus. Travel is required. The role is not DOT-regulated and is not safety-sensitive. Candidates must be at least 18 and legally authorized to work in the United States. National base pay is $127,800–$230,700; total target cash earnings are $153,360–$276,840. Actual compensation depends on factors including work location, qualifications, and experience. T-Mobile describes its culture as innovative, agile, transparent, dynamic, diverse, inclusive, and focused on growth and transformation.

Requirements

Bachelor’s degree plus seven years of related work experience, or an advanced degree plus five years of related experience.
Acceptable fields of study include Computer Science or Information Technology.
Knowledge and abilities in artificial intelligence, cybersecurity, escalation management, threat modeling, security analysis, security automation, security consulting, security engineering, security incident management, security technologies, and stakeholder management.
At least 18 years of age.
Legally authorized to work in the United States.
Willingness to travel; travel is required.

Nice To Haves

Seven to ten years conducting security assessments and vulnerability testing in digital environments.
Seven to ten years developing and implementing cybersecurity measures across technologies, including mobile and IoT devices, cloud services, and network technologies.
Seven to ten years leading and collaborating with engineering teams to improve security postures and strategic cybersecurity initiatives.
Information Security knowledge.
Information Systems knowledge.
CISSP, CCSK, CCSP, CISA, and/or CISM certification.

Responsibilities

Conduct security assessments, code reviews, and vulnerability testing to identify and mitigate risks.
Develop proactive security measures and strategies to improve security across technologies.
Collaborate with engineering teams to integrate security practices into software development and deployment.
Serve as a cybersecurity subject matter expert, providing guidance and leadership to business units.
Drive strategic security initiatives to protect against cyber threats and ensure compliance with security standards.
Evaluate new technologies and processes for potential vulnerabilities and recommend corrective actions.
Lead continuous, hypothesis- and intelligence-driven threat hunting, adversary emulation, and rapid-response vulnerability assessments.
Identify, validate, and drive remediation of risks across software, systems, and infrastructure.
Perform other duties or projects as assigned by business management.

Benefits

Competitive base salary and compensation package.
Annual stock grant.
Employee stock purchase plan.
401(k).
Access to year-round money coaches.
Annual bonus or periodic sales incentive or bonus for eligible regular, non-temporary employees.
Medical insurance.
Dental insurance.
Vision insurance.
Flexible spending account.
Paid time off.
Up to 12 paid holidays.
Paid parental and family leave.
Family building benefits.
Back-up care.
Enhanced family support.
Childcare subsidy.
Tuition assistance.
College coaching.
Short- and long-term disability coverage.
Voluntary AD&D coverage.
Voluntary accident coverage.
Voluntary life insurance.
Voluntary disability insurance.
Voluntary long-term care insurance.
Mobile service and home internet discounts for eligible employees.
Pet insurance for eligible employees.
Commuter and transit programs for eligible employees.