Join to apply for the Principal Engineer, System Security role at ANDREW an Amphenol company
1 week ago Be among the first 25 applicants
Join to apply for the Principal Engineer, System Security role at ANDREW an Amphenol company
Get AI-powered advice on this job and more exclusive features.
Location: Nashua, New Hampshire Department: Engineering Posted: 5/21/2025 Location Name: US9028 / U730 (US - NH Virtual 5212)
Wage: Depends on Experience Annual Position Type: Salary Full Time
Join our team and help shape the future of connectivity indoors and outdoors. Together, let's push the boundaries of technology and advance sustainable networks worldwide.
How You'll Help Us Connect The World
We are seeking a skilled and experienced Platform and Network Security Expert to lead and enhance security measures across the infrastructure of our DAS and RAN products, while also operationalizing and upholding security measures and policies defined by Andrew's security team.
This role focuses on securing 4G/5G components and their management systems, ensuring compliance with telecom security standards, as well as the security requirements from operators and customers. It also involves detecting vulnerabilities and working closely with operators, vendors, and internal SW and HW development teams. As a Principal System Security Engineer, you will be responsible for the security aspects of the RAN and DAS products as part of the ICN business unit of Andrew. This role is hybrid based in Nashua, NH or Richardson, TX.
You Will Make An Impact By
Designing and defining security policies and requirements for RAN and DAS systems
Architect secure environments across Linux/Windows systems, Kubernetes, and container platforms. Implement least privilege access, strong authentication, and patch management.
Performing risk assessments, threat modeling, and vulnerability analysis on RAN elements and AWS cloud hosting.
Preparing responses to customer security requirements and questionnaires.
Collaborating with engineering teams to ensure security is embedded in network design and deployment.
Monitoring for and responding to security incidents involving RAN equipment and interfaces.
Validating the security of vendor software/hardware and ensuring adherence to 3GPP, NIST, and GSMA standards.
Defining and enforcing security configurations (e.g., secure boot, firmware validation, secure signaling).
Engaging in penetration and other security testing, evaluating and prioritizing security vulnerabilities.
Engaging with security test houses and evaluating their test plans and test reports.
Working with internal and external stakeholders on compliance audits and regulatory requirements (e.g., O-RAN, RED, NESAS, NCSC, GDPR).
Developing tools/scripts to automate RAN security monitoring, cloud infrastructures, vulnerability management, system audits, security baselining and reporting.
Staying up-to-date with emerging threats and mitigation strategies specific to telecom infrastructure.
Implementing and maintaining security policies and configurations for AWS cloud infrastructure in alignment with Andrew's security team directives and governance frameworks
Applying and operationalizing the policies, standards, and controls designed by the central security team and ensuring alignment across product security implementations.
Required Qualifications For Consideration
Bachelor's or Master's degree in Telecommunications, Computer Science, Cybersecurity/Information security or related field.
10+ years of experience in the Telecommunications and Cellular industry with at least 5 years of experience in telecom network security, especially in RAN and DAS products Security.
Expertise in mobile network security principles, PKI, TLS, IPSec, and Zero touch provisioning.
Experience with base station software (e.g., O-RAN, vRAN) and vendor-specific RAN solutions.
Knowledge of O-RAN architecture and Open RAN Security groups.
Knowledge of cloud infrastructure and cloud security.
Familiarity with security frameworks like 3GPP SA3, GSMA FS.33/FS.37, and NESAS/SCAS, NIST, CIS Benchmarks, etc.
Proficiency in security testing tools (e.g., Nessus, OpenVAS, Burp Suite, or telecom-specific security scanners).
Knowledge of Linux security, secure coding practices, and scripting (Python, Bash).
Strong communication and cross-functional collaboration skills, especially in interfacing with centralized security teams and development stakeholders.
You Will Excite Us If You
Have certifications such as CISSP, CEH, GICSP, or vendor-specific security certifications.
Have experience with AI/ML-based threat detection in telecom networks.
Have knowledge of 3GPP standards, especially for 4G/5G RAN architecture and interfaces (e.g., X2, S1, NG, F1).
Have hands-on experience with telco cloud environments (e.g., Kubernetes, OpenStack, CNFs).
Why ANDREW?
Explore exciting career opportunities at ANDREW, part of the Amphenol family. With a legacy of over 85 years in wireless innovation, we empower mobile operators and enterprises with cutting-edge solutions. ANDREW, an Amphenol company, is proud of our reputation as an excellent employer. Our focus is to provide the highest level of support and responsiveness to both our employees and our customers, the world's largest technology companies. ANDREW offers the opportunity for career growth within a global organization. We believe that our company is unique in that every employee, regardless of his or her position, has the ability to positively impact the business.
ANDREW is an "Equal Opportunity Employer" - Minority/Female/Disabled/Veteran/Sexual Orientation/Gender Identity/National Origin.
For additional company information, please visit our website at https://www.andrew.com.
Seniority level Seniority level Mid-Senior level
Employment type Employment type Full-time
Job function Job function Information Technology
Industries Telecommunications
Referrals increase your chances of interviewing at ANDREW an Amphenol company by 2x
Sign in to set job alerts for “System Security Engineer” roles. Burlington, MA $90,000.00-$110,000.00 6 days ago
Information Assurance (IA) System Security Engineer III Hanscom AFB, MA $120,000.00-$140,000.00 1 month ago
Sr. Cybersecurity & Compliance Engineer/Ciso Senior CyberSecurity Engineer (Top Secret) Hanscom Air Force Base, MA $120,000.00-$135,000.00 1 week ago
Hanscom Air Force Base, MA $75,200.00-$158,100.00 1 month ago
Bedford, MA $130,000.00-$140,000.00 3 weeks ago
Cyber Security & Control Systems Storage & Virtual Engineer North Reading, MA $110,000.00-$170,000.00 1 week ago
Information Systems Security Engineer (ISSE) Cyber Security Engineer-Information Systems Security Officer - Senior Cyber Security & Control Systems Storage & Virtual Program Engineer Information System Security Engineer (ISSE) III We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.
#J-18808-Ljbffr