SS7 Monitoring Specialist

About the role

Join Vodafone's Cyber Defence Operations (CDO) as an SS7 Monitoring Specialist. You will protect Vodafone’s telecommunications networks from signalling‑based threats by monitoring, analysing, detecting, and responding to security events across SS7, Diameter and GTP‑C.

Key responsibilities

• Monitor and triage signalling security events using Signalling Firewalls (SigFW) and Signalling Intrusion Detection Systems (SigIDS).
• Lead investigations of complex signalling incidents through deep protocol analysis, telemetry interrogation and advanced analytics.
• Define, maintain and continuously improve Cyber Defence playbooks, dashboards and operational processes for signalling threats.
• Develop clear incident reporting to support prioritisation, escalation and decision‑making.
• Support development and production integration of SigIDS.
• Analyse unusual signalling patterns, identify SS7/Diameter abuse and respond before network impact.
• Translate emerging attack techniques (e.g., interception, location tracking, routing manipulation, fraud enablement) into detection logic and investigative guidance.
• Collaborate with global Cyber Security teams, CERT and Incident Management on major incidents.
• Raise and manage incident and remediation tickets using Remedy.

Required profile

• Strong knowledge of telecom signalling protocols (SS7, Diameter, GTP‑C).
• Experience in security monitoring, incident investigation and threat detection.
• Ability to work as an escalation point for complex security incidents.
• Proactive mindset for continuous improvement of security playbooks and dashboards.

Required skills

• SS7 protocol
• Diameter protocol
• GTP‑C protocol
• Signalling Firewalls (SigFW)
• Signalling Intrusion Detection Systems (SigIDS)
• Protocol analysis
• Telemetry analysis
• Advanced analytics
• Incident management tools (e.g., Remedy)