About the job
Grade: L2/L3
Location: Islamabad, Islamabad Capital Territory, Pakistan
Application Deadline: April 30, 2026
Role overview
Pakistan Mobile Communication Limited (PMCL), known as Jazz, is hiring a Telecommunications Network Security Specialist in Islamabad. This position focuses on strengthening the security of core telecom infrastructure, with a particular emphasis on signaling systems and the secure integration of virtualization and cloud-native functions such as NFVI and 5G. The role involves defending against threats to SS7, Diameter, 4G EPC, and 5G Service-Based Architecture, while supporting the safe adoption of new technologies. Reporting to the Manager of Architecture & Cloud Security, the specialist will work alongside a team of 15 security professionals.
Main responsibilities
- Secure signaling networks for SS7, Diameter, and 5G SBA.
- Deploy signaling firewalls and anti-fraud controls to address SMS, voice, and roaming attacks.
- Monitor and respond to threats such as location tracking (ATI abuse), SMS interception, and call redirection or spoofing.
- Maintain secure interconnections with roaming partners and third-party organizations.
- Design and enforce security protocols for EPC components (MME, SGW, PGW, HSS) and 5G Core elements (AMF, SMF, UPF, AUSF, UDM, NRF).
- Implement security controls that align with 3GPP standards.
- Protect APIs within the 5G SBA architecture using OAuth2, TLS, and API gateways.
- Conduct security hardening for virtual and cloud-native network functions (VNFs and CNFs).
- Safeguard NFV infrastructure, including OpenStack, Kubernetes, and containers.
- Apply micro-segmentation and zero-trust models to the telecom network.
- Enable workload protection for CNFs and VNFs.
- Integrate telecom workloads with cloud security solutions for both public and private cloud environments.
- Monitor telecom-specific threats using SIEM and SOC platforms.
- Feed telecom probes and logs (signaling, GTP, Diameter) into the SOC for analysis.
- Lead incident response for telecom network breaches.
- Conduct proactive threat hunting focused on telecom fraud and signaling misuse.
- Define and maintain the overall telecom security architecture.
- Evaluate and deploy telecom security tools, including signaling firewalls for SS7, Diameter, and 5G, DDoS mitigation systems, and IDS/IPS for telecom protocols.
