FTTH Security Expert

<p><strong>About P1 Security</strong></p><p>Founded in 2011 by serial entrepreneur and security expert Philippe Langlois, P1 Security is on a mission to secure critical and sovereign mobile networks by providing services and technologies to identify, detect and recover from critical threats and vulnerabilities.</p><p>P1 Security is one of the very few companies in the world tackling telecom security through pure Mobile and Telecom Security attacks and security <strong>from 5G and Cloud-based infrastructure Security</strong>, OpenRAN, Network Slicing and RAN Sharing, Edge Computing (MEC), <strong>down to legacy 2/3/4G Diameter, SS7 SIGTRAN attacks, GTP manipulation and fuzzing.</strong></p><p>Our offering and expertise range from Network and Telecom Core Network Security, Intrusion Detection and Vulnerability Assessment solutions, with technology backed by more than a decade of engineering research. We are a lean scale-up, engaged in emerging markets (Eastern Europe, Middle East, Asia), Europe and North America.</p><p>The P1 Security team includes experts from telecom operators and security companies as well as renowned security researchers who regularly present unique P1 Security research at leading international security conferences & GSMA working groups. P1 Labs, the R&D branch of P1 Security, shares Open Source initiatives with the telecom security community (www.github.com/P1sec/).</p><p>We are growing the team with people who want to help write it. We are looking for experienced profiles with grounded, hands-on knowledge of telecom networks — and a real appetite for FTTx technologies in particular. Curious, creative and open-minded people who want to dig deep into a genuinely sovereign topic: the security of the mobile networks our connectivity runs on.</p><h2>Job Description</h2><p>If your years have been spent in FTTx — access networks, PON, CPE, provisioning, field operations — and security has always been the question you kept coming back to, talk to us. The role described below does not really exist as a box to tick yet: we care far more about the person than about an exact match with a job title. Bring the part of the picture you know best, and we will build the rest together.</p><h3>What you will do</h3><ul><li><p><strong>Audits</strong> — you will plan and run scoped, authorized penetration tests of FTTH/PON infrastructure: OLTs, ONTs/ONUs, the management systems around the ODN, and customer premises equipment.</p></li><li><p><strong>PON internals</strong> — you will dig into GPON, XG-PON, XGS-PON and NG-PON2: OMCI, PLOAM, and how ONTs are authenticated and provisioned.</p></li><li><p><strong>CPE and gateways</strong> — you will take them apart: firmware extraction and reverse engineering, exposed debug interfaces (UART/JTAG), hardcoded credentials, update mechanisms and web/CLI management flaws.</p></li><li><p><strong>Subscribers at scale</strong> — you will look at what provisions and manages them (TR-069/CWMP, TR-369/USP, ACS/OSS/BSS integrations, zero-touch provisioning) and at the subscriber-facing edge: BNG/BRAS, PPPoE/IPoE, DHCP, RADIUS/AAA, VLAN segmentation, QoS and isolation between subscribers.</p></li><li><p><strong>Convergence and infrastructure</strong> — you will follow fixed–mobile convergence (5G FWA, shared core, shared OSS/BSS, unified identity and billing) and review devices and management planes (routers, switches, aggregation equipment, NMS/EMS, SNMP, NETCONF/YANG, SSH/Telnet, APIs, privileged access) against vendor and industry hardening baselines.</p></li><li><p><strong>Threat modeling</strong> — you will map attack paths for real oper