KPN is the Netherlands' dominant telecom and IT provider, operating at a scale that makes it critical infrastructure. For nearly 150 years, the company has built and maintained the networks connecting Dutch homes and businesses. It serves over 3.5 million households with mobile, internet, and TV services, while its IoT division manages 13 million connected M2M SIMs across 195 countries through 600+ roaming partners. The threat surface is national: the integrity, confidentiality, and availability of these networks underpin everything from consumer privacy to economic continuity.
Security teams at KPN operate across a sprawling technical domain - 5G networks, mobile connectivity, machine-to-machine communications, and consumer internet services all present distinct attack vectors. The challenge isn't theoretical; it's about protecting live, high-traffic systems that can't go down. The company's global IoT footprint means threat modeling spans carrier-grade infrastructure to edge devices, with supply chain and protocol-level risks layered in. Engineers work against real adversaries targeting telecom signaling protocols, SIM infrastructure, and increasingly, OT/IT convergence points.
With more than 10,000 employees, KPN functions at enterprise scale. The company has signaled a commitment to sustainability - it's ranked in the top five of the Dow Jones Sustainability World Index - which reflects a culture that takes long-term operational discipline seriously. For security practitioners, this is a shop where the stakes are concrete: nation-state interest, critical infrastructure mandates, and a hybrid environment spanning legacy telecom architecture and cloud-native 5G cores. No theatrics, just persistent, high-consequence work.
