§What You'll Do
- Build AI systems that find and exploit vulnerabilities in carrier-grade telecom and ISP infrastructure: core routers, BRAS/BNG, GPON/EPON, DSLAM, CMTS, and mobile packet core.
- Reverse engineer firmware and management planes on equipment from Nokia, Ericsson, Huawei, ZTE, Calix, and similar vendors to train models that generalize across platforms.
- Target subscriber-edge infrastructure (BRAS, BNG, AAA systems, and RADIUS/DIAMETER stacks) where authentication, session control, and policy enforcement converge.
- Develop AI-driven tooling that discovers attack paths through SS7, GTP, DIAMETER, and carrier routing infrastructure at scale.
- Turn deep telecom domain knowledge into the systems and data that let machines operate at the backbone level.
§Requirements
- Strong experience with telecom or ISP infrastructure security: core networks, access networks, or carrier routing.
- Familiarity with carrier-grade platforms: Cisco IOS-XR, Juniper Junos, Nokia SR OS, Huawei VRP, or similar.
- Understanding of telecom protocols: SS7/SIGTRAN, GTP, DIAMETER, RADIUS, MPLS, BGP at carrier scale, GPON/EPON.
- Experience reverse engineering network equipment firmware or proprietary network operating systems.
- Strong C/C++ or Python skills for tooling and exploit development.
§Nice to Have
- Experience with mobile core network elements (MME, SGW, PGW, HSS, or 5G equivalents).
- Familiarity with BRAS/BNG, DSLAM, CMTS, OLT, or other access and subscriber-edge network equipment.
- Published CVEs or advisories against telecom or ISP equipment vendors.
- Experience with TR-069/CWMP, NETCONF/YANG, RADIUS/DIAMETER AAA, or carrier management protocols.
- Experience building with LLMs and AI agents.
- Background in CNO, SIGINT, or government telecom operations.
§You Are
- Clearly interested in stepping away from purely manual research and moving toward the development of AI systems.
- Building something massive matters more to you than comfort, titles, or predictability.
- You want to be early at a company that will change an industry, and you're ready to do what that actually takes.
For Recruiters
Note to recruiting firms: Telecom or ISP infrastructure security experience is the core requirement. Carrier-grade routing, mobile core, or access network experience is essential. Candidates from telco vendor security teams, CNO backgrounds, or ISP engineering are ideal.
Ready?
Apply for Telecom / ISP Exploitation Engineer
Email team@zealotlabs.com with a resume and a paragraph on what you want to build with us.
Apply now