Principal Red Team Operator

Verizon • Ashburn, VA

1d • Hybrid

About The Position

As an experienced Red Team Operator in the telecommunications industry, you will proactively identify vulnerabilities and security gaps in Verizon’s infrastructure, applications, and processes. You will emulate real-world adversarial techniques to evaluate and improve defensive capabilities and help protect customer data and network infrastructure. The role involves collaborating with internal teams to simulate advanced persistent threats and conduct red team engagements tailored to the telecommunications sector. It requires an understanding of complex enterprise networks, 4G and 5G wireless network infrastructure, cloud technology, network equipment, and networking protocols. The position is an opportunity to apply mobile network experience in an offensive cybersecurity role.

The role may be based at any U.S. Verizon hub location. It is hybrid, with a defined work location, work from home, and at least three days per week in the office. Scheduled weekly hours are 40.

Requirements

• Bachelor’s degree or four or more years of work experience.
• Six or more years of relevant work experience.
• Strong understanding of 4G/5G core network architecture and supporting systems.

Nice To Haves

• A degree in engineering, cybersecurity, or computer science.
• Strong understanding of 4G/5G protocols and interfaces, including GTP, Diameter, SS7, S1-MME, S1-U, S11, and HTTP/2 Service-Based Architecture.
• Knowledge of 3GPP standards relevant to EPC, 4G Core, 5GSA, 5G Core, 5G/LTE radio access, VoLTE, and VoNR.
• Foundational knowledge of enterprise networking technologies and protocols, including routers, switches, VPN, load balancers, TCP/IP, IP addressing, ASN, CIDR, and subnetting.
• Strong Linux skills.
• Strong coding and scripting skills, such as Python, Bash, and PowerShell.
• Ability to vet exploit code and understand what it does.
• Knowledge of network architecture and cloud environments, such as Kubernetes, OpenStack, and OpenShift.
• Ability to think like an attacker and devise innovative attack scenarios targeting telecommunications environments.
• Strong communication and teamwork skills, including the ability to interact effectively with technical and non-technical stakeholders.
• Certifications such as OSCP, OSCE, OSEP, or GIAC certifications such as GPEN, GXPN, or GWAPT.
• Familiarity with security challenges in internet-scale networks, wireless core components, cloud, and edge computing.

Responsibilities

• Conduct red team exercises that emulate realistic threats targeting telecommunications systems, including wireline and wireless network infrastructure and supporting systems.
• Identify, exploit, and report vulnerabilities in critical telecommunications systems and infrastructure.
• Deliver technical reports and executive summaries documenting findings, exploit paths, and remediation recommendations.
• Work with the blue team to develop detection and prevention strategies informed by red team exercises.
• Stay up to date on attack techniques, tactics, and procedures relevant to the telecommunications industry.
• Collaborate with security and operations peers to provide insights that improve the organization’s security posture.

Benefits

• Medical, dental, and vision coverage.
• Short- and long-term disability insurance.
• Basic and supplemental life insurance and AD&D insurance.
• Identity theft protection.
• Pet insurance.
• Group home and auto insurance.
• Matched 401(k) savings plan.
• Up to 8 company-paid holidays per year and up to 6 personal days per year.
• Paid parental leave.
• Adoption assistance.
• Tuition assistance.
• Other incentives and an award-winning total rewards package.
• Potential premium pay, such as overtime, shift differential, holiday pay, and allowances, depending on the role.
• Up to 15 days of vacation per year for newly hired employees, increasing with additional service.

What This Job Offers

• Job Type: Full-time
• Career Level: Principal