Network Cyber Security Engineer

Verizon•Southlake, TX

10d•$101,000 - $194,000•Hybrid

About The Position

Verizon’s GN&T Network Security team is seeking an experienced Cybersecurity Engineer for its Network Security Defense team. The team owns the security lifecycle and effectiveness of the Core, Edge, and Access networks, along with GN&T systems and network functions. The role advances the organization’s security posture through real-time threat monitoring and detection, incident response, vulnerability management, security architecture, and threat hunting. It includes work with SIEM tools such as Splunk and security controls such as firewalls, encryption, centralized identity and access management, and multifactor authentication. The role also calls for advanced networking and protocol analysis, endpoint and memory forensics, data science and querying, and automation and scripting to improve cybersecurity tooling. The engineer identifies technology gaps and leads the design, architecture, and implementation of security solutions; develops operational guidelines, policies, and procedures; and implements strategic solutions in a highly scalable environment. They partner with Operations, Engineering, and Planning to embed secure design patterns in new deployments and major changes, work independently on strategic technical challenges, mentor junior engineers, and communicate technical concepts to varied audiences. The position leads network security incident response, including triage, containment, eradication, and recovery; develops incident playbooks and response runbooks; supports escalated investigations; and performs root cause analysis and reporting. It also includes proactive threat hunting, creating and tuning SIEM detections, improving network visibility and telemetry, and assessing security controls. This is a hybrid role with work from home and at least three days per week in an assigned office. The scheduled workweek is 40 hours.

Requirements

Bachelor’s degree in Computer Science, Cybersecurity, or a related field, or four or more years of work experience.
Four or more years of relevant experience, demonstrated through work and/or military experience or specialized training.
Ability to write complex, optimized Splunk SPL searches, including macros, data models, and lookups, for threat hunting and investigation.
Knowledge of incident response lifecycles such as NIST or SANS.
Experience designing, testing, and maintaining automation playbooks using SOAR platforms to automate triage and response actions.
Experience with risk-based alerting, notable event management, asset and identity correlation, and defining or tuning correlation searches.

Nice To Haves

Security certifications such as CompTIA Security+, CISSP, CCIP, CISM, CCSP, OSCP, or CEH.
Experience with Identity and Access Management (IAM) solutions.
Ability to build consensus and shared understanding of security objectives, goals, and execution steps.
Experience with network protocols and information security; networking certifications such as PCNSE, CCNP, or CCNA.
Experience with networks, 4G/5G wireless network functions, or virtualization technologies such as OpenStack and Kubernetes.
Experience with Python or automation tools such as Ansible.
UNIX or Linux systems engineering expertise across a variety of variants.
Experience with encryption for data in transit, such as IPsec or TLS, and at rest.
Experience in conflict resolution and negotiation to ensure designs, strategies, and decisions support security requirements.
Strong analytical skills and attention to detail, with a track record of managing and delivering results.
Effective written, interpersonal, and verbal communication skills.

Responsibilities

Identify technology gaps and lead the design, architecture, and implementation of appropriate security solutions.
Create formal guidelines, policies, and procedures to support smooth, error-free operations.
Implement strategic security solutions in a highly scalable environment.
Partner with Operations, Engineering, and Planning to embed secure design patterns in new deployments and major changes.
Work independently on strategic technical challenges.
Mentor junior engineers and guide or delegate technical documentation and tasks.
Communicate complex technical concepts clearly to internal and external audiences.
Lead network security incident response, including triage, containment, eradication, and recovery.
Build and refine incident playbooks and response runbooks for high-impact scenarios.
Provide expert analysis and guidance as escalation support for security investigations and active incidents.
Conduct root cause analysis and produce incident reports covering timeline, impact, evidence, and remediation recommendations.
Proactively hunt for threats across identity, endpoint, and network telemetry.
Create and tune SIEM threat detections to improve alert fidelity and reduce false positives.
Improve network visibility and telemetry collection to strengthen detection and response capabilities.
Assess security controls regularly, validate configuration effectiveness, and close gaps discovered during incidents or hunts.
Conduct real-time threat monitoring and detection, manage the vulnerability lifecycle, and contribute to security architecture and cybersecurity tooling improvements.

Benefits

Medical, dental, and vision insurance
Short- and long-term disability insurance
Basic and supplemental life insurance
AD&D insurance
Identity theft protection
Pet insurance
Group home and auto insurance
Matched 401(k) savings plan
Up to 8 company-paid holidays per year
Up to 6 personal days per year
Paid parental leave
Adoption assistance
Tuition assistance
Other incentives and total rewards
Up to 15 days of vacation per year for newly hired employees, increasing with additional service
Potential premium pay, including overtime, shift differential, holiday pay, and allowances, depending on the role