AT&T
At a Glance
About the Job:
The Senior Specialist Cyber Security is responsible for supporting the AI enabled Vulnerability management from AT&T India. The team member collaborates with US and India Cyber Security teams to develop, implement and operationalize AI enabled VM capabilities in Application Security and Infrastructure Security in a DevSecOps framework.
Roles & Responsibilities include:
Experience Level: 8+ years.
Location: Hyderabad / Bengaluru
Primary / Mandatory Skills:
Desirable skills:
Additional information (if any): Flexible to provide coverage in US morning hours on a need-basis, and as required.
Weekly Hours:
40Time Type:
RegularLocation:
IND:AP:Hyderabad / Argus Bldg 4f & 5f, Sattva, Knowledge City- Adm: Argus Building, Sattva, Knowledge City, IND:KA:Bangalore / Intl Tech Park, Navigator Bldg, Whitefield Road: Intl Tech Park, Navigator Bldg:Intl Tech Park, Navigator BldgAT&T and its subsidiaries are committed to equal employment opportunity. All hiring, promotion, and other employment decisions remain merit-based and free from discrimination on the basis of race, color, religion, religious creed, national origin, ancestry, age, sex, sexual orientation, gender, gender identity, gender expression, physical disability, mental disability, pregnancy, medical condition, genetic information, marital status, citizenship status, military status, veteran status, or any other characteristic protected by federal, state, or local laws. In addition, AT&T will provide reasonable accommodations to qualified individuals with disabilities. AT&T is a fair chance employer and does not initiate a background check until an offer is made. Click here to learn more or request an application accommodation here.
Source: AT&T careers · View original posting
AT&T Inc. is a multinational telecommunications holding company based in Dallas, founded in 1876. It evolved from the Bell Telephone Company and became a leading provider of voice, data, and entertainment services in the U.S. and globally. The company has a rich history, including the establishment of the first long-distance network and significant milestones like transatlantic service in 1927. Today, AT&T is a leader in telecommunications, technology, and entertainment, offering a variety of services such as wireless connectivity, high-speed internet, local and long-distance phone services, and pay-TV. Its product lineup includes wireless plans under the AT&T Mobility brand, DIRECTV satellite TV, and AT&T Fiber internet. The company focuses on innovation in areas like 5G and IP networks, continuing to build on its extensive legacy in telecommunications. AT&T serves a wide range of consumer and business markets, including government and enterprise clients.
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
“Stated AppSec Mission:"We defend the AT&T network with a multi-layered approach"– AT&T Sustainability: Cybersecurity (https://sustainability.att.com/priority-topics/cybersecurity), Company Site , Developer Enablement vs. Gatekeeping:"Developers can now use our AI chatbot to more easily implement security policies"– AT&T Sustainability: Cybersecurity (https://sustainability.att.com/priority-topics/cybersecurity), Company Site , Risk Philosophy:"We assess, identify and manage risks from cybersecurity threats"– AT&T Sustainability: Cybersecurity (https://sustainability.att.com/priority-topics/cybersecurity), Company Site , Stated Pain Points or Goals (Verbatim):"We significantly increased our rates of device and database scanning"– AT&T Sustainability: Cybersecurity (https://sustainability.att.com/priority-topics/cybersecurity), Company Site , "We began to use Artificial Intelligence to enable our developers and workforce"– AT&T Sustainability: Cybersecurity (https://sustainability.att. (Evidence: see collection log.)”
Security Team
Section 2: The AppSec Team: People & Structure ("The Team")Org Structure & Reporting Line:"The program encompasses the Chief Security Office (CSO)"– AT&T Sustainability: Cybersecurity (https://sustainability.att.com/priority-topics/cybersecurity), Company Site , "The CISO plays the key management role in assessing and managing our material risks"– AT&T Sustainability: Cybersecurity (https://sustainability.att.com/priority-topics/cybersecurity), Company Site , Key Public-Facing Leaders (top 1-3):Rich Baich, Senior Vice President & Chief Information Security Officer – LinkedIn: https://www.linkedin.com/in/richbaichKey Quote: "spent more than 16,000 hours completing AI training and labs"– Fortune (https://fortune.com/2025/12/19/at-t-executive-manifested-his-chief-information-security-officer-job/), News Article , Team Size Estimate (as_of:):"AT&T maintains a comprehensive global security organization comprised of over 1100 security professionals."– AT&T Information & Network Security Customer Reference Guide (https://www.business.att.com/content/dam/attbusiness/guides/att-information-and-network-security-customer-reference-guide.pdf) ⚠️, Corporate PDF , Note: explicit AppSec-only headcount not publicly available.LinkedIn Search Query Used: "site:linkedin. LinkedIn-derived estimate unavailable due to access/limitations.Active AppSec Job Postings (as_of:):Count: 1 (evidence of at least one active posting)- Lead Cybersecurity - Application Security DevSecOps Engineer – Job ID on AT&T jobs site (https://www.att.jobs/job/middletown/lead-cybersecurity-application-security-devsecops-engineer/117/88306173664) ⚠️, Job Posting , Common Skill/Tool Patterns (verbatim from postings):"Lead the implementation, configuration, and optimization of DAST tools"– AT&T Job Posting (Job ID R-81508) ⚠️, Job Posting , "Experience integrating DAST tools (e.g., Burp Suite, IBM AppScan, Netsparker, Acunetix)"– AT&T Job Posting (Job ID R-81508) ⚠️, Job Posting , "Knowledge of complementary security testing approaches such as Static Application Security Testing (SAST) and Interactive Application Security Testing (IAST)"– AT&T Job Posting (Job ID R-81508) ⚠️, Job Posting , "including Java, Python, Bash/Shell Scripting, PHP, Javascript"– AT&T Job Posting (Job ID R-81508) ⚠️, Job Posting , Gaps & Contradictions:- Current AppSec org chart and AppSec-specific reporting line (e.g., whether AppSec reports into CSO centrally or is embedded) not publicly available at the AppSec-team level
Key Initiatives
"Shift Left"in Practice:"Developers can now use our AI chatbot to more easily implement security policies"– AT&T Sustainability: Cybersecurity (https://sustainability.att.com/priority-topics/cybersecurity), Company Site , Note: No public verbatim description of pre-commit/IDE plugin rollout, but the AI chatbot statement indicates developer-facing enablement.Vulnerability Management Process (Intake / Triage / Remediation):Intake:"This includes ... a Bug Bounty program"– AT&T Information & Network Security Customer Reference Guide (https://www.business.att.com/content/dam/attbusiness/guides/att-information-and-network-security-customer-reference-guide.pdf) ⚠️, Corporate PDF , "vulnerability scans are conducted on networks, computer hosts and applications"– AT&T Information & Network Security Customer Reference Guide (https://www.business.att.com/content/dam/attbusiness/guides/att-information-and-network-security-customer-reference-guide.pdf) ⚠️, Corporate PDF , Triage/Remediation:"Each security advisory is reviewed, evaluated, assigned a severity rating"– AT&T Information & Network Security Customer Reference Guide (https://www.business.att.com/content/dam/attbusiness/guides/att-information-and-network-security-customer-reference-guide.pdf) ⚠️, Corporate PDF , "The security teams work with application and system owners to remediate those vulnerabilities"– AT&T Sustainability: Cybersecurity (https://sustainability.att.com/priority-topics/cybersecurity), Company Site , Note: No public, verbatim SLAs (e.g., MTTR or days-to-remediate) for application vulnerabilities were found.Secure SDLC Artifacts:"Policy and Requirements for Application Development and Sustainment"– AT&T Information & Network Security Customer Reference Guide (https://www.business.att.com/content/dam/attbusiness/guides/att-information-and-network-security-customer-reference-guide.pdf) ⚠️, Corporate PDF , "threat modeling"is listed among mechanisms used for risk assessment – AT&T Sustainability: Cybersecurity (https://sustainability.att.com/priority-topics/cybersecurity), Company Site , Recent Initiatives (Last 6 Months):Evidence Found:"We began to use Artificial Intelligence to enable our developers and workforce"– AT&T Sustainability: Cybersecurity (https://sustainability.att.com/priority-topics/cybersecurity), Company Site , "started analyzing company applications to identify risk impacts from quantum computing enabled cryptography attacks"– AT&T Sustainability: Cybersecurity (https://sustainability.att.com/priority-topics/cybersecurity), Company Site , Gaps & Contradictions:- No public, recent (last 6 months) AppSec-specific program announcements (e.g., new SAST or secrets-detection rollouts) were found
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.
Interested in this role?
Apply on AT&T's site