Hybrid 5G Core Security Tester

at Nokia

• Job title: 5G Core Security Tester
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Tech skills: Cyber Security, Docker, Jenkins, Kubernetes, Linux, Python
• Location requirements: Hybrid, Athens, Greece

About the role

• Security Tester for Nokia's Cloud Mobile Gateway, conducting security assessments and enhancing cloud-native technologies. Collaborate with R&D to ensure security across scalable networks and services.

Responsibilities

• Conduct regular security tests or perform tests upon request, including but not limited to port scanning, service detection, vulnerability assessments, and compliance testing, malware detection, fuzzing and flooding as outlined in the Nokia DFSEC (Design for Security) requirements guide.
• Analyze findings in collaboration with R&D teams and report any identified issues in the designated issue tracker.
• Review and update customer documentation guides in accordance with each new release, ensuring all changes are communicated effectively.
• Maintain, update, and deploy security tools and systems as necessary, ensuring they are always up-to-date and effective.
• Identify and report any gaps in security coverage, working to expand security measures and mitigate potential risks.
• Assist in the deployment and maintenance of new automation testing pipelines to streamline testing processes.
• Provide support by stepping in for team members and assuming their responsibilities when required.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field (Master’s degree is highly desirable).
• 3+ years of work experience in Computer Science, Cybersecurity, or a related field, with proficiency in Linux OS and scripting in Bash, Python, or TCL.
• Solid understanding of network protocols, security principles, and best practices.
• Passionate about penetration testing with a strong grasp of network security, information security, and security policy management.
• Hands-on or academic experience with penetration testing activities, including:
• Nmap for port and service detection
• Nessus (or similar) for vulnerability scanning
• Static analysis of container images using tools like Anchore
• Compliance assessments using tools like Lynis or CIS-CAT Pro
• Fuzz testing with Synopsys Defensics or a similar tool, such as the open-source packet manipulator Scapy.
• Flood testing and other DoS (Denial of Service) techniques using hping/ nping
• Familiarity with Docker, Kubernetes, and related technologies.
• Experience with tools like JIRA, Git, JFrog Artifactory, and Jenkins is a plus.
• Excellent command of English, both written and verbal.