Engr IV-Security Engineering

Bachelor’s degree with four or more years of work experience in a relevant security field.

Four or more years of dedicated, hands-on experience in Red Teaming, adversary simulation, or advanced penetration testing.

Should have one of these core offensive security certifications: OSCP, CRTO, CRTP, or GXPN.

Understanding of the MITRE ATT&CK framework, Threat Intelligence integration, and APT emulation, including experience bypassing modern EDR/XDR solutions.

Development experience with enterprise tech stacks (specifically Node.js, Angular, and Java) to conduct white-box source code reviews, exploit complex web applications, and build bespoke attack tooling.

Applied knowledge of AI security risks and usage, including prompt engineering, LLM jailbreaking, manipulating AI agent frameworks/APIs (e.g., MCP), and using AI models to accelerate offensive workflows.

Knowledge of enterprise cyber hygiene principles, industry security frameworks (e.g., NIST CSF, CIS Controls), and experience translating offensive findings into actionable data for compliance, risk, and audit stakeholders.

Expertise in configuring and safely utilizing Command and Control (C2) frameworks (e.g., Cobalt Strike, Mythic, Sliver).

Demonstrated experience in collaborative Purple Teaming, translating technical attack narratives into actionable detection engineering rules.

Even better if you have one or more of the following:

A Master's degree in a relevant technical field.

In-depth knowledge of securing and attacking cloud-native architectures, containerization platforms (Docker, Kubernetes), and modern CI/CD pipelines.

Highly recognized advanced certifications such as OSEP, OSWE, OSED, or advanced cloud security architecture certifications.

Proficiency in programming and scripting languages (such as C#, C++, Go, Rust, Python, Bash, or PowerShell) to develop custom implants, droppers, and evasive tooling.

A solid understanding of continuous attack surface management methodologies and advanced OSINT collection.

Familiarity with regulatory compliance frameworks relevant to the telecommunications industry (e.g., SOX, PCI-DSS, CPNI).

Strong communication skills, with the ability to translate technical findings into clear, actionable risks for management and engineering teams.

If Verizon and this role sound like a fit for you, we encourage you to apply even if you don’t meet every “even better” qualification listed above.

Verizon is an equal opportunity employer. We evaluate qualified applicants without regard to race, gender, disability or any other legally protected characteristics.