Sr Engineer, Cyber Incident Response Team (CIRT Team Experience Req) T-Mobile USA
Bellevue, WA

Job Description

Do you have the passion, expertise, and desire to protect T-Mobile and our customers' assets? Do you have experience in Cyber Incident Response? Then come join the Nation's Un-Carrier - T-Mobile as our latest Sr. Engineer, Cybersecurity - (CIRT)!

The Sr. Engineer, Cybersecurity (CIRT) role working in the Digital Security Organization will be responsible for monitoring, assessing, and responding to information security events in a large, diverse enterprise environment. The best candidate for the role should have a strong comprehension of incident response, work well with other people and have strong verbal and written communication skills. This position correlates security related data across the enterprise, performs Security Incident Response Handling and Incident containment/recovery and assists application owners to understand and implement the security aspects of their applications. Candidates must have some knowledge of system security design and network security best practices. Analytical and organizational skills, and the ability to effectively communicate and work independently and as part of a team are required.As America's Un-carrier, T-Mobile USA, Inc. (NASDAQ: "TMUS") is redefining the way consumers and businesses buy wireless services through leading product and service innovation. The company's advanced nationwide 4G and 4G LTE network delivers outstanding wireless experiences for customers who are unwilling to compromise on quality and value. Based in Bellevue, Washington, T-Mobile USA. Inc. provides services through its subsidiaries and operates its flagship brands, T-Mobile and Metro by T-Mobile. For more information, please visit http://www.t-mobile.com

* In-depth knowledge of security best practices from working within a large organization
* Knowledge and experience with current cyber threats and landscape within an Enterprise environment

Minimum Requirements:

* Experience on a Cyber Incident Response team within a large-scale environment
* High-level network troubleshooting ability
* In-depth knowledge of security technologies such as, but not limited to:
* Intrusion Detection systems (Checkpoint, McAfee, ISS, Snort, etc.)
* Security Information and Event Management (SIEM)
* Network Windows/Linux forensics techniques
* Vulnerability scanning tools (WebInspect, Nessus, etc.)


* In-depth knowledge of networking and OS technologies such as, but not limited to:
* Diagnostic tools such as packet capture/decode and WAN probes
* Operating Systems: Windows and UNIX - Solaris, HP/UX, or Linux operating systems administration
* Networking components including routers, hubs, switches, etc.
* TCP/IP protocols
* OSI Seven Layer Model


* Knowledge of state and Federal regulatory requirements PCI, PII, CPNI requirements
* Strong verbal and written communication skills
* Ability to plan, organize and prioritize tasks to complete independently, and within time frame establishe
* Education/Vocational Training
* Bachelors or Associate degree or equivalent experience
* One current form of the following certifications (preferred) - CISSP, CISA, GCIA and or GCIH


* Digital Security
* LI-KM3
* Investigate incidents for Cyber Incident Response Team (CIRT)
* Develop content to improve detective capabilities in Security Information and Event Management (SIEM) tool
* Analyze disparate data sources for security incidents
* Respond to network security incidents promptly to mitigate damage or restore service
* A champion for process, recommending tool, software development, or infrastructure changes to improve or enhance security
* Lead small to medium sized projects as directed
* Develop and deliver metrics as requested
* Participate in Cyber Incident Response Team (CIRT) rotation which may involve non-traditional working hours