Network Security Engineer

About the role

The GN&T Network Security team is looking for a highly motivated Cybersecurity Engineer to join the Network Security Defense team. The Defense teams are responsible for owning the security lifecycle and effectiveness across the Core, Edge, and Access networks, as well as all systems and network functions within GN&T. In this role, you will advance our security posture through real-time Threat Monitoring & Detection using SIEM tools like Splunk, lead Incident Response efforts during a breach, and manage the continuous Vulnerability Management lifecycle across networks and applications.

The position requires defining and implementing robust Security Architecture, including security telemetry logs (e.g., syslog), network access control lists (ACLs), stateful firewalls, encryption (at rest and in-transit), centralized Identity and Access Management with Multi-Factor Authentication (MFA). A strong candidate will also possess Threat Hunting or Detection Engineering skills, including Network & Protocol Analysis, Endpoint Forensics, elements of Data Science querying of large datasets, and experience in automation & scripting to enhance Cybersecurity tooling.

This role can be located in any US-based Verizon location. In this hybrid role, you'll have a defined work location that includes work from home and assigned office days in one of the offices listed for this position.

Responsibilities

• Support Security Improvements: Identify security gaps and lead the design, architecture, and implementation of appropriate security solutions.
• Collaborative Design: Partner across Operations, Engineering, and Planning organizations to ensure secure design patterns are embedded into new deployments and major changes.
• Strategic Problem Solving: Work with lead engineers on strategic security technical challenges and complex investigations.
• Incident Analysis: Provide analysis during active incidents, support root cause analysis, and produce clear reports outlining timelines, impact, and remediation.
• Security Assessments: Perform regular security control assessments to validate configuration effectiveness and close gaps discovered during active hunts.
• Technical Communication: Articulate complex technical concepts clearly to diverse internal and external audiences.
• Implement threat-led security defense in collaboration with engineering team stakeholders.
• Develop and refine threat detection capabilities within Security Information and Event Management (SIEM) platforms, such as Splunk and other security tooling.

Requirements

You'll need to have:

• Bachelor’s degree or three or more years of relevant work experience in network security or a related field.
• Experience with industry-standard SIEM tools (e.g., Splunk, QRadar, Microsoft Sentinel, Elastic).
• Experience with network fundamentals (TCP/IP) and general router operations, including:
  • Familiarity with the differences between Control Plane, Data Plane, and Management Plane concepts.
  • Conceptual knowledge of common routing protocols (e.g., BGP, OSPF, IS-IS) and the basic principles of securing them.
  • Exposure to reviewing network traffic logs (such as NetFlow or IPFIX) with the ability to assist in identifying anomalies or suspicious patterns.
• Intermediate-level knowledge encompassing the design and deployment of comprehensive security architectures, including firewalls, encryption, Identity and Access Management (IAM), and Multi-Factor Authentication (MFA).
• Expertise in securing and hardening of management network interfaces utilized for telemetry.
• A strong foundation in networking fundamentals (OSI layers 1-4) for effective incident response triage.

Qualifications

Even better if you have one or more of the following:

• Certifications: Security (CISM, OSCP, Security+) or Networking (JNCIA, CCNA, JNCIS, CCNP).
• Internet-Scale Data: Hands-on experience with Netflow, BGP, DNS, and IDS logs at scale.
• Incident Frameworks: Knowledge of NIST 800-61 and MITRE ATT&CK methodologies.
• Advanced Analytics: Experience with risk-based alerting, asset/identity correlation, and big data tools like Elasticsearch.
• System Engineering: Unix or Linux expertise and experience with encryption (IPsec, TLS) and DDoS mitigation.
• Project management skills with a track record of delivering results.
• Effective written and verbal communication skills for cross-functional collaboration.

Benefits

• Competitive salaries and performance-based incentives, including a broad-based discretionary equity award program.
• Comprehensive health and wellbeing resources, including medical, dental, vision, short and long-term disability, basic life insurance, supplemental life insurance, AD&D insurance, identity theft protection, pet insurance, and group home & auto insurance.
• Matched 401(k) savings plan.
• Up to 8 company-paid holidays per year and up to 6 personal days per year.
• Paid parental leave, adoption assistance, and tuition assistance.
• Opportunities for flexible working arrangements.
• Training and development resources, including funding towards education assistance, award-winning training, online development tools, and access to industry research.
• Volunteering opportunities as part of environmental, community, and sustainability commitments.

Newly hired employees receive up to 15 days of vacation per year, which grows with additional service.

Pay

The annual salary range for this role based on a full-time schedule is $72,000.00 - $129,000.00, depending on location and confirmed job-related skills and experience. This is an incentive-based position with the potential to earn more. For part-time roles, compensation will be adjusted to reflect hours.

Schedule

Scheduled weekly hours: 40. In this hybrid role, you'll have a defined work location that includes working from home and a minimum of three days per week in the office, set by your manager.