FTTH Security Expert

Jobgether; Schweiz; Remote; CHF 165,000 - 358,000; Full time

Benefits offered by this job

Fully remote worldwide

Independent contractor engagement

Monthly team meetups

In-person gatherings every two months

Sovereign telecommunications focus

Job summary

Jobgether in Switzerland is seeking an experienced FTTH Security Expert for a fully remote independent contractor role. You will assess fixed-line networks, FTTH infrastructure, and provisioning systems, conducting authorized audits and penetration tests across telecom environments.

You will analyze GPON/XGS-PON, ONTs/OLTs, and CPE security, while evaluating TR-069/CWMP, TR-369/USP, and BSS/OSS integrations.

Qualifications

• Must have strong knowledge of fixed-line networks and FTTH/PON architectures.
• Proven experience conducting security audits and penetration tests across IT and OT environments.
• Understanding of FTTH/PON tech, provisioning processes and related networks.
• Experience with telecom equipment vendors such as Huawei, ZTE, Nokia, Ericsson, Calix or Adtran.
• Familiarity with security standards like 3GPP SCAS, GSMA NESAS, ISO/IEC 27001, NIST CSF, ITU-T/BBF.
• Experience in red teaming or adversary emulation for critical infrastructure.
• Strong capabilities in infrastructure security assessment and vulnerability analysis.
• Fluent English; French is a plus.

Responsibilities

• Plan and conduct authorized security audits and penetration tests across FTTH/telecom environments.
• Analyze GPON/XG-PON/NGA technologies and ONTs/OLT security.
• Assess CPE/GW firmware security, including firmware updates and interface vulnerabilities.
• Evaluate subscriber provisioning, TR-069/CWMP, TR-369/USP, and OSS/BSS integrations.
• Review network access controls, DHCP/PPPoE/IPoE, RADIUS, VLAN, QoS and isolation.
• Investigate fixed-mobile convergence, 5G FWA, shared OSS/BSS platforms and billing systems.
• Examine network infrastructure security across routers, switches, and management interfaces.
• Develop actionable remediation recommendations and proof-of-concept evidence.
• Contribute to internal security tooling, testing methodologies and lab environments.

Skills

Fixed-line networks

Security audits

Penetration testing

FTTH & PON

Telecom equipment

Telecom security standards

Red teaming

Vulnerability analysis

Infrastructure security assessment

English fluency

French (optional)

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an FTTH Security Expert based in Switzerland.

We are looking for an experienced telecommunications security professional with strong hands‑on knowledge of fixed‑line networks and a particular interest in fiber‑to‑the‑home (FTTH) technologies. In this fully remote, independent contractor role, you will assess the security of fiber access infrastructure, broadband equipment, provisioning systems, and operator environments. You will plan and conduct authorized security audits and penetration tests, uncover vulnerabilities, and develop practical recommendations to strengthen critical telecommunications infrastructure. Working across technologies ranging from GPON and XGS-PON to customer premises equipment and fixed‑mobile convergence, you will tackle complex technical challenges in real‑world operator environments. You will collaborate with experienced security researchers and telecom specialists while contributing to internal tools, methodologies, and reusable testing resources. This is an opportunity to help protect the networks that underpin modern connectivity and digital sovereignty.

Accountabilities

As an FTTH Security Expert, you will investigate and assess vulnerabilities across fiber access networks, telecom infrastructure, and associated management systems, translating your findings into actionable security improvements.

• Security audits and penetration testing: Plan and conduct scoped, authorized penetration tests of FTTH and PON infrastructure, including Optical Line Terminals (OLTs), Optical Network Terminals (ONTs/ONUs), Optical Distribution Network (ODN) management systems, and customer premises equipment.

• PON protocol and infrastructure analysis: Investigate GPON, XG-PON, XGS-PON, and NG-PON2 technologies, including OMCI, PLOAM, and the authentication and provisioning mechanisms used for ONTs.

• CPE and gateway security: Analyze customer premises equipment through firmware extraction and reverse engineering, examining UART/JTAG debugging interfaces, hardcoded credentials, firmware update mechanisms, and web or command‑line management vulnerabilities.

• Subscriber management security: Assess subscriber provisioning and management systems, including TR-069/CWMP, TR-369/USP, ACS/OSS/BSS integrations, and zero‑touch provisioning.

• Network access and segmentation: Examine subscriber‑facing infrastructure such as BNG/BRAS, PPPoE/IPoE, DHCP, RADIUS/AAA, VLAN segmentation, QoS, and isolation between subscribers.

• Fixed‑mobile convergence: Investigate security considerations involving 5G Fixed Wireless Access (FWA), shared network cores, shared OSS/BSS platforms, unified identity systems, and billing infrastructure.

• Network infrastructure assessment: Review routers, switches, aggregation equipment, NMS/EMS platforms, and management interfaces, including SNMP, NETCONF/YANG, SSH/Telnet, APIs, and privileged access mechanisms, against vendor and industry hardening standards.

• Threat modeling: Map realistic attack paths in telecommunications environments using frameworks and resources such as MITRE ATT&CK, GSMA FASG/FS.xx guidance, and the MITRE FiGHT knowledge base.

• Reporting and remediation: Produce clear, prioritized security reports containing proof‑of‑concept evidence, risk assessments, and actionable remediation recommendations. Present findings to stakeholders and support remediation verification and retesting.

• Research and methodology development: Contribute to internal security tools, testing methodologies, laboratory environments, and reusable attack playbooks.

Requirements

The ideal candidate combines deep knowledge of fixed‑line telecommunications architecture with proven cybersecurity auditing and penetration‑testing experience. You should be comfortable investigating complex technical environments, identifying practical attack paths, and communicating security findings clearly.

• Strong knowledge of fixed‑line network architectures, particularly FTTx, DSL, and coaxial technologies.

• Mandatory: Proven experience conducting security audits and penetration tests across both IT and OT infrastructure.

• Practical understanding of FTTH and PON technologies, including their architecture, protocols, equipment, and provisioning processes.

• Experience with telecommunications equipment and vendor ecosystems such as Huawei, ZTE, Nokia, Ericsson, Calix, or Adtran.

• Familiarity with telecommunications security standards and frameworks, including 3GPP SCAS, GSMA NESAS, ISO/IEC 27001, NIST CSF, and ITU-T/BBF specifications.

• Experience in red teaming or adversary emulation targeting critical infrastructure.

• Strong technical capabilities in infrastructure security assessment, vulnerability analysis, and penetration testing.

• Fluent English communication skills, both written and spoken.

• French language skills are optional.

Relevant certifications and additional experience are advantageous:

• Offensive security certifications such as OSCP, OSEP, OSWE, or OSED.

• GIAC certifications such as GPEN, GXPN, or GRID.

• Practical certifications such as CEH Practical, eJPT/eCPPT, or CRTO.

• Specialized telecommunications security training, including GSMA programs or telecom and hardware‑focused training from Black Hat or DEF CON.

• Published security research, CVE disclosures, conference presentations, or bug bounty experience involving telecommunications systems or embedded devices.

Benefits

• Fully remote working arrangement, with worldwide availability.

• Independent contractor engagement, offering flexibility in how you organize your work.

• Opportunity to work on advanced telecommunications and critical infrastructure security challenges.

• Collaboration with experienced telecom specialists, security researchers, and industry professionals.

• Exposure to emerging technologies, including FTTH, 5G, network virtualization, and telecom infrastructure security.

• Opportunity to contribute to internal research, security tools, laboratory environments, and open‑source initiatives.

• Monthly team meetups with department colleagues.

• Full‑team in‑person gatherings every two months to encourage collaboration and maintain team connections.

• Opportunity to contribute to a mission focused on protecting critical and sovereign telecommunications networks.