Penetration Tester - RedTeam - 4G/5G - Telecommunication

Locations: For now Germany and UK, more will probably follow

The main purpose is not simply to penetration test the infrastructure, but to simulate a genuine intrusion and assess whether the customer’s SOC and Blue Team detect and respond effectively. The consultant will attempt to compromise the radio site infrastructure and move further into the network, while assessing whether the customer’s SOC and Blue Team identify, investigate and respond to the activity.

Core objectives

• Conduct black box Red Team testing from RAN radio site infrastructure
• Attempt to gain access to local devices and configurations and pivot towards OSS, management networks and, core network elements
• Test the effectiveness of the customer’s monitoring, detection and incident response capabilities
• Record every action and technique used (TTPs), including - but not limited to - timestamps, devices, IP addresses, MAC addresses and accounts (for the Blue Team/ Security teams to review)
• Identify gaps in the customer’s security controls, detection coverage and response processes
• Produce a detailed report covering the attack path, findings, missed detections and recommended improvements

Required experience

• Strong hands on Red Team and infrastructure penetration testing experience
• Proven experience within telecommunications or carrier environments
• Radio access networks and 2G (optional coverage) and 4G/5G (mandatory) infrastructure
• Telecom site, transmission, backhaul and management networks
• Adversary simulation, lateral movement and testing SOC or Blue Team detection capabilities
• Experience with vendors such as Juniper, Fortinet, Huawei, Ericsson, Nokia and Cisco