Engr IV-Security Engineering

When you join Verizon

You want more out of a career. A place to share your ideas freely - even if they’re daring or different. Where the true you can learn, grow, and thrive. At Verizon, we power and empower how people live, work and play by connecting them to what brings them joy. We do what we love - driving innovation, creativity, and impact in the world. Our V Team is a community of people who anticipate, lead, and believe that listening is where learning begins. In crisis and in celebration, we come together - lifting our communities and building trust in how we show up, everywhere & always. Want in? Join the #VTeamLife.

What you’ll be doing...

The Verizon Cyber Security Team is looking for a highly skilled Security Engineer (Engr IV) to drive our Red Team and Adversary Simulation capability within Technology Product Development (TPD). In this role, you will elevate our offensive security posture beyond standard vulnerability discovery. Your mission is to rigorously test our organization's People, Processes, and Technology against realistic, advanced threats. We do not exist merely to find missing patches; we act as a catalyst to ensure Verizon is resilient against the threats of tomorrow.

This team rejects the notion that Red Teaming is defined by a checklist of scanners. We are looking for a true builder-hacker hybrid-someone who natively speaks the language of modern software engineering and treats offensive operations as an engineering discipline. You will prioritize strategy over tooling, emulating adversary Tactics, Techniques, and Procedures (TTPs) to test our Threat Management Center's (TMC) detection pipelines. You will operate as a true partner, culminating campaigns with collaborative Purple Team exercises to empower developers to build secure, resilient products from the ground up while enforcing strict cyber hygiene across the enterprise.

• Execute Adversary Simulations: Design and execute complex, objective-based Red Team campaigns modeled on real-world adversaries targeting the telecom industry, utilizing the MITRE ATT&CK framework.

• Target Modern Architectures & AI Ecosystems: Focus attacks on the modern software supply chain, full-stack applications (Node, Angular, Java), and cloud environments. Participate in offensive engagements against AI-driven applications, including testing Model Context Protocol (MCP) integrations, custom LLM agents, and human-in-the-loop (HITL) validations.

• Validate Cyber Hygiene & Compliance: Look beyond complex exploit chains to identify and expose systemic failures in foundational cyber hygiene. Map campaign findings against enterprise security policies and regulatory compliance requirements to prove where technical controls are failing.

• AI-Augmented Offensive Operations: Actively leverage generative AI and modern tooling to accelerate vulnerability research, automate custom payload generation, and enhance red team workflows.

• Test Detection and Response: Operate with stealth and precision to evaluate Verizon's logging, alerting, and incident response pipelines in real-time, focusing on "Living off the Land" methodologies.

• Drive True Purple Teaming: Embrace a Gray/White-box methodology by collaborating closely with product and development teams. Conduct post-campaign replay exercises with the Blue Team and developers to build robust detection rules and secure coding practices.

• Manage Attack Infrastructure as Code: Deploy and maintain dedicated, external cloud attack infrastructure (AWS/GCP) off-network using automated CI/CD pipelines to mirror sophisticated threat actors.

• Enforce Uncompromising RoE: Adhere to explicit Rules of Engagement, ensure comprehensive asset inventories, and maintain strict operational safety and legal compliance during all engagements.

• Mentorship & Collaboration: Provide technical guidance and peer mentorship to junior Red Team operators and penetration testers.

What we’re looking for…

You’ll need to have:

• Bachelor’s degree with four or more years of work experience in a relevant security field.

• Four or more years of dedicated, hands-on experience in Red Teaming, adversary simulation, or advanced penetration testing.

• Should have one of these core offensive security certifications: OSCP, CRTO, CRTP, or GXPN.

• Understanding of the MITRE ATT&CK framework, Threat Intelligence integration, and APT emulation, including experience bypassing modern EDR/XDR solutions.

• Development experience with enterprise tech stacks (specifically Node.js, Angular, and Java) to conduct white-box source code reviews, exploit complex web applications, and build bespoke attack tooling.

• Applied knowledge of AI security risks and usage, including prompt engineering, LLM jailbreaking, manipulating AI agent frameworks/APIs (e.g., MCP), and using AI models to accelerate offensive workflows.

• Knowledge of enterprise cyber hygiene principles, industry security frameworks (e.g., NIST CSF, CIS Controls), and experience translating offensive findings into actionable data for compliance, risk, and audit stakeholders.

• Expertise in configuring and safely utilizing Command and Control (C2) frameworks (e.g., Cobalt Strike, Mythic, Sliver).

• Demonstrated experience in collaborative Purple Teaming, translating technical attack narratives into actionable detection engineering rules.

Even better if you have one or more of the following:

• A Master's degree in a relevant technical field.

• In-depth knowledge of securing and attacking cloud-native architectures, containerization platforms (Docker, Kubernetes), and modern CI/CD pipelines.

• Highly recognized advanced certifications such as OSEP, OSWE, OSED, or advanced cloud security architecture certifications.

• Proficiency in programming and scripting languages (such as C#, C++, Go, Rust, Python, Bash, or PowerShell) to develop custom implants, droppers, and evasive tooling.

• A solid understanding of continuous attack surface management methodologies and advanced OSINT collection.

• Familiarity with regulatory compliance frameworks relevant to the telecommunications industry (e.g., SOX, PCI-DSS, CPNI).

• Strong communication skills, with the ability to translate technical findings into clear, actionable risks for management and engineering teams.

If Verizon and this role sound like a fit for you, we encourage you to apply even if you don’t meet every “even better” qualification listed above.

Where you’ll be working

Scheduled Weekly Hours

Equal Employment Opportunity

Verizon is an equal opportunity employer. We evaluate qualified applicants without regard to race, gender, disability or any other legally protected characteristics.