P1 Security

Security Engineer

• Plan and run scoped, authorized penetration tests of FTTH/PON infrastructure, including OLTs, ONTs/ONUs, ODN management systems, and customer premises equipment
• Analyze GPON, XG-PON, XGS-PON, and NG-PON2 internals, including OMCI, PLOAM, ONT authentication, and provisioning
• Perform firmware extraction and reverse engineering of CPEs and gateways
• Assess UART/JTAG debug interfaces, hardcoded credentials, update mechanisms, and web/CLI management flaws
• Assess subscriber provisioning and management systems including TR-069/CWMP, TR-369/USP, ACS/OSS/BSS integrations, and zero-touch provisioning
• Review BNG/BRAS, PPPoE/IPoE, DHCP, RADIUS/AAA, VLAN segmentation, QoS, and subscriber isolation
• Assess fixed–mobile convergence, including 5G FWA, shared core, shared OSS/BSS, unified identity, and billing
• Review routers, switches, aggregation equipment, NMS/EMS, SNMP, NETCONF/YANG, SSH/Telnet, APIs, and privileged access against hardening baselines
• Map attack paths using MITRE ATT&CK, GSMA FASG/FS.xx guidance, and MITRE FiGHT
• Produce prioritized reports with proof-of-concept evidence, risk ratings, and actionable remediation
• Present findings to stakeholders and support remediation verification and retesting
• Contribute to internal tooling, test methodologies, lab environments, and reusable attack playbooks

Explore FTTH Security Expert at P1 Security. Review requirements and application details.

Open roles

FTTH Security Expert