RAN Network Security Engineer

Verizon • Southlake, TX

3d • $81,000 - $155,000 • Hybrid

About The Position

The GN&T Network Security team is looking for a highly motivated and experienced Cybersecurity Engineer to join the Network Security Defense team. The Defense team is responsible for owning the security lifecycle and effectiveness across the Core, Edge, and Access networks, as well as all systems and network functions within GN&T. In this role, you will be critical in advancing the security posture of our Radio Access Network, which includes non-terrestrial and in-building networks. Deep technical knowledge across these networks is key for success. Through real-time threat monitoring & detection using SIEM tools like Splunk, leading Incident Response efforts during a breach, and managing the continuous vulnerability management lifecycle across networks and applications. The position also requires expertise in defining and implementing robust Security Architecture, including firewalls, encryption, centralized Identity and Access Management, and Multi-Factor Authentication (MFA). A strong candidate will also possess advanced threat hunting skills, including advanced networking & protocol analysis, endpoint & memory forensics, data Science & querying, and demonstrable experience in automation & scripting to enhance our cybersecurity tooling. Support the identification of security gaps and lead the design, architecture, and implementation of appropriate security solutions. Partner across Operations, Engineering, and Planning organizations to ensure secure design patterns are embedded into new deployments and major changes. Work with lead engineers on strategic security technical challenges and complex investigations. Provide expert analysis during active incidents, support root cause analysis, and produce clear reports outlining timelines, impact, and remediation. Perform regular security control assessments to validate configuration effectiveness and close gaps discovered during active hunts. Articulate complex technical concepts clearly to diverse internal and external audiences.

Requirements

• Bachelor's degree in Computer Science, Cybersecurity, or a related field, or three or more years of relevant work experience in network security or a related field.
• Experience in securing RAN technologies (Diameter, GTP, eCPRI/CPRI) and a wide array of network devices, such as Cell Site Routers, eNBs, gNBs, FWA, In-Building solutions, and non-terrestrial networks.
• Knowledge of Internet protocols, Software-Defined Networking (SDN), OTNGN, and Hub & Spoke architectures.
• Demonstrated organization and project management skills with a proven track record of delivering results.
• Strong practical experience with Splunk/SIEM tools is necessary for data analysis, dashboard creation, alerting, automation, risk-based alerting, managing notable events, and defining/tuning correlation searches.
• Familiarity with Identity and Access Management (IAM).

Nice To Haves

• Possession of a CCIE (Service Provider or Security) or Nokia NRS II/SRA.
• Additional certifications such as CISSP, CompTIA Security+, OSCP, CCNP, CCIE, or CCNA are beneficial.
• Effective written and verbal communication skills for cross-functional collaboration.
• Expertise in using Python, Ansible, or Terraform to automate network device configurations and operations.
• Competence in using Splunk or Elasticsearch for network data analysis, creating dashboards, setting up alerts, and handling large-scale internet data sources (Netflow, BGP, DNS, IDS logs).
• Knowledge of Firewalls, VPNs, IDS/IPS, DDoS mitigation, encryption technologies (IPsec, TLS), identifying vulnerabilities in RAN, and Security Information and Event Management (SIEM) tools like Splunk.
• Familiarity with Network Function Virtualization (NFV), Identity and Access Management (IAM) solutions, the system development lifecycle, mitigating network/system/application layer attacks, and working with SQL/NoSQL databases and UNIX/Linux operating systems.
• Strong organizational, project management, and written/verbal communication abilities, with the capacity to collaborate with various stakeholders and demonstrate leadership and mentoring skills.
• Fluency in security frameworks, particularly the application of CIS Benchmarks (Level 1 & 2 hardening) and mitigating MITRE ATT&CK Tactics, Techniques, and Procedures (TTPs) on network devices, along with a solid understanding of network security fundamentals.

Responsibilities

• Support the identification of security gaps and lead the design, architecture, and implementation of appropriate security solutions.
• Partner across Operations, Engineering, and Planning organizations to ensure secure design patterns are embedded into new deployments and major changes.
• Work with lead engineers on strategic security technical challenges and complex investigations.
• Provide expert analysis during active incidents, support root cause analysis, and produce clear reports outlining timelines, impact, and remediation.
• Perform regular security control assessments to validate configuration effectiveness and close gaps discovered during active hunts.
• Articulate complex technical concepts clearly to diverse internal and external audiences.

Benefits

• health and wellness benefit options including: medical, dental, vision, short and long term disability, basic life insurance, supplemental life insurance, AD&D insurance, identity theft protection, pet insurance and group home & auto insurance
• matched 401(k) savings plan
• company paid holidays per year and up to 6 personal days per year
• paid parental leave
• adoption assistance and tuition assistance

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees