Network Security Principal Engineer

Verizon • Southlake, TX

9h • Hybrid

About The Position

When you join Verizon You want more out of a career. A place to share your ideas freely — even if they’re daring or different. Where the true you can learn, grow, and thrive. At Verizon, we power and empower how people live, work and play by connecting them to what brings them joy. We do what we love — driving innovation, creativity, and impact in the world. Our V Team is a community of people who anticipate, lead, and believe that listening is where learning begins. In crisis and in celebration, we come together — lifting our communities and building trust in how we show up, everywhere & always. Want in? Join the #VTeamLife. What you’ll be doing... The GN&T Network Security team is looking for a highly motivated and experienced Cybersecurity Engineer to join the Network Security Defense team. The Defense teams are responsible for owning the security lifecycle and effectiveness across the Core, Edge, and Access networks, as well as all systems and network functions within GN&T. In this role, you will be critical in advancing our security posture through real-time Threat Monitoring & Detection using SIEM tools like Splunk, leading Incident Response efforts during a breach, and managing the continuous Vulnerability Management lifecycle across networks and applications. The position also requires expertise in defining and implementing robust Security Architecture, including firewalls, encryption, centralized Identity and Access Management, and Multi-Factor Authentication (MFA). A strong candidate will also possess advanced Threat Hunting skills, including Advanced Networking & Protocol Analysis, Endpoint & Memory Forensics, Data Science & Querying, and demonstrable experience in Automation & Scripting to enhance our Cybersecurity tooling. The essential operational technology (OT) specific knowledge required for this cybersecurity role centers on OT/ICS cybersecurity, encompassing SCADA, PLCs, and laboratory systems. Core competencies necessitate the application of established standards such as ISA/IEC 62443 and the NIST Cybersecurity Framework (CSF). A deep understanding of OT/SCADA architectures, critical infrastructure protection, and the Purdue Model is mandatory. The role involves designing and implementing security solutions based on the Purdue Model and Zero Trust principles for OT protocols, including, but not limited to, Modbus TCP and BACNet. Furthermore, managing vulnerability assessments and executing patch management for ICS/SCADA environments while ensuring minimal operational disruption is a key requirement. Identify technology gaps to lead in the design, architecture, and implementation of appropriate security solutions. Drive and lead relevant, strategic solutions in a highly scalable environment and leading implementation of said solutions. Partner across the Operations, Engineering, and Planning organizations to ensure secure design patterns are embedded into new deployments and major changes Work independently on strategic technical challenges. Identify opportunities to mentor, guide, and delegate technical documentation/tasks to support the team and broader organization. Communicate clearly and effectively, articulating complex technical concepts to diverse internal and external audiences. Serve as escalation support for security related investigations, providing expert-level analysis and guidance during active incidents Act as the security subject matter expert in network design reviews, ensuring that the Network assets meet stringent carrier-grade security standards. Execute root cause analysis and produce clear incident reports outlining timeline, impact, evidence, and remediation recommendations Conduct proactive threat hunting across the identity, endpoint, network telemetry to uncover adversary behavior and reduce dwell time Create and tune threat detections using SIEM ( Security Information and Event Management) to improve alert fidelity and reduce false positives Drive continuous improvement of network visibility and telemetry collection to strengthen detection and response capabilities Perform regular security control assessments validating configuration effectiveness and closing gaps discovered during incidents or hunts

Requirements

• Bachelor’s degree or 6 or more years of relevant work experience, demonstrated through one or a combination of work and/or military experience, or specialized training.
• Strong background in OT/ICS cybersecurity, including SCADA, PLCs, and lab systems, with application of frameworks such as ISA/IEC 62443 and NIST CSF.
• In-depth experience with risk-based alerting, managing notable events, asset/identity correlation, and defining/tuning correlation searches.
• Expert-level ability to write complex, optimized Splunk SPL (Search Processing Language) searches, including macros, data models, and lookups for efficient threat hunting and investigation.
• Strong foundational knowledge of incident response lifecycles (NIST or SANS) with experience designing, testing, and maintaining automation playbooks using SOAR platforms to automate triage and response actions.
• Expert in conflict resolution and negotiation to ensure that design, strategy, and decisions consistently support security requirements.
• Strong analytical skills and attention to detail with a proven track record of managing and delivering results.
• Leadership experience as a subject matter expert with effective written, interpersonal, and verbal communication skills.

Nice To Haves

• Security certifications such as CompTIA Security+, CISSP, CCIP, CISM, CCSP, OSCP (Offensive Security Certified Professional), Ethical Hacking (CEH, OSCP)
• Experience with Identity and Access Management (IAM) solutions.
• Ability to build consensus and a common understanding of security objectives, goals, and execution steps.
• Experience with network protocols and information security with networking certifications such as PCNSE, CCNP or CCNA.
• Experience with OT networks, Including BMS and SCADA.
• Experience with scripting languages like Python and/or automation tools like Ansible.
• Experience in UNIX or Linux systems engineering expertise with a variety of variants.
• Experience with encryption for data in transit (e.g., IPsec, or TLS) and at rest.

Responsibilities

• Identify technology gaps to lead in the design, architecture, and implementation of appropriate security solutions.
• Drive and lead relevant, strategic solutions in a highly scalable environment and leading implementation of said solutions.
• Partner across the Operations, Engineering, and Planning organizations to ensure secure design patterns are embedded into new deployments and major changes
• Work independently on strategic technical challenges.
• Identify opportunities to mentor, guide, and delegate technical documentation/tasks to support the team and broader organization.
• Communicate clearly and effectively, articulating complex technical concepts to diverse internal and external audiences.
• Serve as escalation support for security related investigations, providing expert-level analysis and guidance during active incidents
• Act as the security subject matter expert in network design reviews, ensuring that the Network assets meet stringent carrier-grade security standards.
• Execute root cause analysis and produce clear incident reports outlining timeline, impact, evidence, and remediation recommendations
• Conduct proactive threat hunting across the identity, endpoint, network telemetry to uncover adversary behavior and reduce dwell time
• Create and tune threat detections using SIEM ( Security Information and Event Management) to improve alert fidelity and reduce false positives
• Drive continuous improvement of network visibility and telemetry collection to strengthen detection and response capabilities
• Perform regular security control assessments validating configuration effectiveness and closing gaps discovered during incidents or hunts

Benefits

• health and wellness benefit options including: medical, dental, vision, short and long term disability, basic life insurance, supplemental life insurance, AD&D insurance, identity theft protection, pet insurance and group home & auto insurance
• matched 401(k) savings plan
• up to 8 company paid holidays per year and up to 6 personal days per year
• paid parental leave
• adoption assistance and tuition assistance
• newly hired employees receive up to 15 days of vacation per year, which grows with additional service

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level