Senior Security Specialist protecting BDO Canada’s enterprise systems through threat detection, incident response, and vulnerability management. Supporting security operations across blended office, client - site, and virtual environments.
About the role
- FTTH security expert auditing PON, CPE, and telecom infrastructure for P1 Security. Producing penetration-test reports and remediation guidance for critical network security.
Responsibilities
- Plan and run scoped, authorized penetration tests of FTTH/PON infrastructure, including OLTs, ONTs/ONUs, ODN management systems, and customer premises equipment
- Analyze GPON, XG-PON, XGS-PON, and NG-PON2 internals, including OMCI, PLOAM, ONT authentication, and provisioning
- Perform firmware extraction and reverse engineering of CPEs and gateways
- Assess UART/JTAG debug interfaces, hardcoded credentials, update mechanisms, and web/CLI management flaws
- Assess subscriber provisioning and management systems including TR-069/CWMP, TR-369/USP, ACS/OSS/BSS integrations, and zero-touch provisioning
- Review BNG/BRAS, PPPoE/IPoE, DHCP, RADIUS/AAA, VLAN segmentation, QoS, and subscriber isolation
- Assess fixed–mobile convergence, including 5G FWA, shared core, shared OSS/BSS, unified identity, and billing
- Review routers, switches, aggregation equipment, NMS/EMS, SNMP, NETCONF/YANG, SSH/Telnet, APIs, and privileged access against hardening baselines
- Map attack paths using MITRE ATT&CK, GSMA FASG/FS.xx guidance, and MITRE FiGHT
- Produce prioritized reports with proof-of-concept evidence, risk ratings, and actionable remediation
- Present findings to stakeholders and support remediation verification and retesting
- Contribute to internal tooling, test methodologies, lab environments, and reusable attack playbooks
Requirements
- Deep knowledge of fixed-line network architecture (FTTx, DSL, Coaxial)
- Experience in security audit pentests on OT and IT infrastructure (mandatory)
- Experience with Huawei, ZTE, Nokia, Ericsson, Calix, or Adtran FTTH equipment
- Familiarity with 3GPP SCAS, GSMA NESAS, ISO/IEC 27001, NIST CSF, and ITU-T/BBF specifications
- Experience in red teaming or adversary emulation against critical infrastructure
- Fluent English speaker
- French optional
- Relevant certifications such as OSCP, OSEP, OSWE, OSED, GPEN, GXPN, GRID, CEH (Practical), eJPT/eCPPT, or CRTO
- Telecom-specific training, such as GSMA, Black Hat/DEF CON telecom, or hardware trainings
- Published research, CVEs, conference talks, or bug bounty history in telecom or embedded devices
Benefits
- Fully remote work policy
- Monthly meetups with department members
- Entire team on-site gathering every two months
- Flexible work arrangements supporting work-life balance
Job title
Job type
Experience level
Salary
Not specified
Degree requirement
No Education Requirement
Location requirements
Report this job
Found something wrong with the page? Please let us know by submitting a report below.
Cybersecurity Lead strengthening Irth’s SaaS security program for utility infrastructure operators. Owning vulnerability management, incident response, cloud security, compliance, and customer trust.
AI Security Architect defining secure AI architectures, governance, and risk frameworks. Levio delivers digital transformation and large - scale technology projects for clients.
Lead security for Duetto's hotel revenue management platform across AWS, DevSecOps, compliance, incident response, and enterprise customer trust. Own the security posture for a global hospitality technology business.
Senior CyberArk engineer strengthening Manulife’s enterprise privileged - access security platform. Automating PAM operations, integrations, resilience, and production support.
Security Engineer building IAM, PAM, and IGA capabilities for Marqeta’s cloud - based embedded finance platform. Automating access controls across AWS, SaaS, DevOps, and AI/ML systems.
Senior Security Engineer securing gaiia’s cloud - based telecom operating system. Protecting applications, infrastructure, customer data, and compliance programs across a serverless TypeScript platform.
Cloud security leader supporting ServiceNow’s AI - native SaaS security and Canadian enterprise customers. Leading customer security engagements, incident investigations, and cloud security improvements.
Senior Consultant leading cyber regulatory remediation for banks, broker - dealers, and insurers. Driving incident response, vulnerability, patch, and IAM workstreams to closure.
Cyber Security Specialist protecting Scarborough Health Network hospitals and healthcare infrastructure. Managing security systems, assessments, vulnerabilities, incidents, and compliance across the Central East Region.