5G Core Security Tester

Description
JOB DESCRIPTION
In Cloud and Network Services, technology leadership drives our business strategy. Our team focuses on delivering cloud-based network services to communication service providers, web-scalers, and enterprise customers.

The Nokia Cloud Mobile Gateway (CMG) goes beyond network virtualization with an optimized cloud-native software design that supports the evolution of advanced 4G, IoT/MTC and 5G services. It delivers the high performance and subscriber scalability to address the growth in users, devices and applications, and the associated demands for high bandwidth and lower latency. The CMG supports multiaccess connectivity by converging multiple mobile gateway functions onto a single, general-purpose computing platform while offering multiple configuration options that provide deployment flexibility.

How You Will Contribute And What You Will Learn
We are looking for a Security Tester to join our P&E Security Engineering team and drive security assurance across our product line. As a Security Tester, you will be responsible for assessing and enhancing the overall security posture of our product deliveries, in accordance with internal security guidelines and methodologies, while working closely with functional teams.

Responsibilities

• Conduct regular security tests or perform tests upon request, including but not limited to port scanning, service detection, vulnerability assessments, and compliance testing, malware detection, fuzzing and flooding as outlined in the Nokia DFSEC (Design for Security) requirements guide.
• Analyze findings in collaboration with R&D teams and report any identified issues in the designated issue tracker.
• Review and update customer documentation guides in accordance with each new release, ensuring all changes are communicated effectively.
• Maintain, update, and deploy security tools and systems as necessary, ensuring they are always up-to-date and effective.
• Identify and report any gaps in security coverage, working to expand security measures and mitigate potential risks.
• Assist in the deployment and maintenance of new automation testing pipelines to streamline testing processes.
• Provide support by stepping in for team members and assuming their responsibilities when required.

Key Skills And Experience
Must have:

• Bachelor's degree in Computer Science, Cybersecurity, or a related field (Master's degree is highly desirable).
• 3+ years of work experience in Computer Science, Cybersecurity, or a related field, with proficiency in Linux OS and scripting in Bash, Python, or TCL.
• Solid understanding of network protocols, security principles, and best practices.
• Passionate about penetration testing with a strong grasp of network security, information security, and security policy management.

• Hands-on or academic experience with penetration testing activities, including:

• Nmap for port and service detection

• Nessus (or similar) for vulnerability scanning
• Static analysis of container images using tools like Anchore
• Compliance assessments using tools like Lynis or CIS-CAT Pro
• Fuzz testing with Synopsys Defensics or a similar tool, such as the open-source packet manipulator Scapy.
• Flood testing and other DoS (Denial of Service) techniques using hping/ nping

Nice to have:

• Familiarity with Docker, Kubernetes, and related technologies.
• Experience with tools like JIRA, Git, JFrog Artifactory, and Jenkins is a plus.
• Excellent command of English, both written and verbal.

About Us
Advancing connectivity to secure a brighter world.
Nokia is a global leader in connectivity for the AI era. With expertise across fixed, mobile and transport networks, powered by the innovation of Nokia Bell Labs, we're advancing connectivity to secure a brighter world.

Learn more about life at Nokia .

About The Business Group
In Cloud and Network Services, as Nokia's growth engine, we create value for communication service providers and enterprise customers by leading the transition to cloud-native software and as-a-service delivery models. Our inclusive team of dreamers, doers and disruptors push the limits from impossible to possible.

Our recruitment process
We act inclusively and respect the uniqueness of people. Our employment decisions are made regardless of race, color, national or ethnic origin, religion, gender, sexual orientation, gender identity or expression, age, marital status, disability, protected veteran status or other characteristics protected by law. We are committed to a culture of inclusion built upon our core value of respect.

If you're interested in this role but don't meet every listed requirement, we still encourage you to apply. Unique backgrounds, perspectives, and experiences enrich our teams, and you may be just the right candidate for this or another opportunity.

The length of the recruitment process may vary depending on the specific role's requirements. We strive to ensure a smooth and inclusive experience for all candidates. Discover more about the recruitment process at Nokia .