Ss7 Monitoring Specialist Job at Vodafone (Newbury)

Job Description

At Vodafone, we’re not just shaping the future of connectivity for our customers – we’re shaping the future for everyone who joins our team. When you work with us, you’re part of a global mission to connect people, solve complex challenges, and create a sustainable and more inclusive world. If you want to grow your career whilst finding the perfect balance between work and life, Vodafone offers the opportunities to help you belong and make a real impact.

Job Responsibility

Define, maintain and continuously improve Cyber Defence playbooks for SigFW related events
Develop clear and actionable incident reporting to support effective prioritisation, escalation and decision making
Support development and production integration of Signalling Intrusion Detection Systems (SigIDS)
Design and maintain operational dashboards and analytics to improve signalling security situational awareness
Perform continuous monitoring and triage of signalling security events in line with defined severity and escalation criteria
Lead the analysis of unusual signalling patterns, behaviours and anomalies within the network, identifying potential SS7/Diameter abuse and responding to threats before network impact occurs
Analyse known and emerging signalling attack techniques (e.g. interception, location tracking, routing manipulation, fraud enablement) and translate these into effective detection logic, analytics and investigative guidance
Maintain expert knowledge of SS7/Diameter abuse patterns and translate this into detection logic, alerts and investigative guidance
Feed lessons learned from incidents and intelligence back into preventative controls, dashboards and playbooks
Raise and manage incident and remediation tickets (e.g. Remedy)
Manage enrichment of signalling telemetry (e.g. via Cribl coordinated through GitHub Enterprise)
Consume telecom specific threat intelligence and integrate insights into SigFW/SigIDS detections, playbooks and operational workflows
Identify control gaps and propose enhancements to detection logic, SigFW policies and operational procedures to improve signalling security posture
Act as a technical liaison between Cyber Defence and Network Engineering to influence signalling security policy, control design and operational effectiveness
Brief internal and external stakeholders including NCSC, NSIE and Ofcom where required
Evaluate and optimise signalling security tooling to ensure effective defence against evolving threats and emerging attack techniques
Continuously work to stabilize the process and procedures
Security Reporting and Advisories – take part in and may drive the delivery of signalling security reports and advisories to all key stakeholders

Requirements

Strong willingness to learn and adapt to new tools, technologies and emerging signalling threats in a fast moving security environment
Open minded, collaborative and comfortable working across technical and operational teams
Demonstrates resilience, curiosity and a positive attitude when operating in high pressure incident environments
Experience with telecommunications signalling protocols (SS7, Diameter, GTP‑C) or strong willingness to rapidly develop expertise in this area
Strong analytical capability across large signalling telemetry datasets to identify anomalies, abuse patterns and emerging threats
Experience working within an operational Cyber Defence or SOC environment, including incident triage and escalation
Hands‑on experience in security event analysis and incident response, particularly within network or telecoms contexts
Experience using security analytics and monitoring platforms such as Dynatrace, Splunk, Google SecOps and Tableau
Understanding of telemetry pipelines, log enrichment, and data quality considerations (e.g. Syslog, Cribl or similar)
Ability to communicate complex technical findings clearly to both technical and non technical stakeholders
Excellent verbal and written communication skills with the ability to articulate complex technical concepts clearly and concisely
Highly disciplined and motivated, able to work independently, under direction or collaboratively as part of a wider team
Strong understanding of security threats and abuse patterns relevant to telecommunications networks and signalling environments
Bachelor’s degree in cyber security, Information Technology, Telecommunications Engineering, or a related field or equivalent professional experience
Working towards, or willingness to obtain, relevant professional certifications in areas such as network security, security analytics, intrusion detection, or incident response (e.g. GCIA, GNFA, Splunk certifications, cloud security certifications, or equivalent)
Equivalent practical experience within telecoms security or signalling focused cyber defence will be considered equally valuable
This role requires eligibility for and willingness to complete UK government security clearance

What we offer

Yearly bonus: 10%
Annual leave: 28 days + bank holidays + the opportunity to buy/sell/carry over 5 days/year
Charity days: 5 days/year
Maternity leave: 52 weeks: the first 13 weeks are fully paid, followed by 26 weeks of half pay
Private pension: You can contribute up to 5% of your basic pay with 2:1 matching from Vodafone up to 10%
Access to: private medical, private dental, free health assessments, share save scheme
Additional discounts: Vodafone retail, gym, cinema, cycle to work, season ticket loan

Vodafone - All Job Offers

Select Country

Ss7 Monitoring Specialist

Job Description

Job Responsibility

Requirements

What we offer

Looking for more opportunities?

Ss7 Monitoring Specialist

Cloud-Native Telecom Services Specialist

2nd Line Roaming Support Specialist

Senior Manager_2L Voice Core Specialist

Senior Manager-2nd Line Roaming Support Specialist

Senior Manager-2nd Line Roaming Support Specialist

Specialist VAS Design and Engineering

Social Worker – Fostering - Family and Friends Team

Spanish Speaking Caregiver

Our AI answers in your language