Senior Network Security Engineer

Verizon•Southlake, TX

23h•Hybrid

About The Position

The GN&T Network Security team at Verizon is seeking a highly motivated and experienced Cybersecurity Engineer to join the Network Security Defense team. This team is responsible for the security lifecycle and effectiveness across Core, Edge, and Access networks, as well as all systems and network functions within GN&T. The role involves advancing the security posture through real-time Threat Monitoring & Detection using SIEM tools like Splunk, leading Incident Response efforts during breaches, and managing continuous Vulnerability Management across networks and applications. The position also requires expertise in defining and implementing robust Security Architecture, including firewalls, encryption, centralized Identity and Access Management, and Multi-Factor Authentication (MFA). A strong candidate will also possess advanced Threat Hunting skills, including Advanced Networking & Protocol Analysis, Endpoint & Memory Forensics, Data Science & Querying, and demonstrable experience in Automation & Scripting to enhance Cybersecurity tooling.

Requirements

Bachelor’s degree or four or more years of relevant work experience demonstrated through one or a combination of work and/or military experience, or specialized training.
Familiarity with Identity and Access Management (IAM) solutions.
Strong foundational knowledge of incident response lifecycles (NIST or SANS) with experience designing, testing, and maintaining automation playbooks using SOAR platforms to automate triage and response actions.
Expert-level ability to write complex, optimized SPL (Splunk Search Language) searches, including macros, data models, and lookups for efficient threat hunting and investigation.
In-depth experience with risk-based alerting, managing notable events, asset/identity correlation, and defining/tuning correlation searches.
Experience in developing, testing, and maintaining automation playbooks using Python/API integrations and Splunk SOAR (Security Orchestration, Automation, and Response) to automate triage and response actions.

Nice To Haves

Certifications such as CCSP, CySA+, GSOC, GCDA, Cisco Certified CyberOps or equivalent SIEM/SOC certifications.
Experience with networking (especially Internet-related protocols), and network and information security.
Networking certifications such as Juniper JNCIS, JNCIA, Cisco CCNP, or CCNA.
Strong working knowledge of incident response frameworks and methodologies like NIST 800-61 and MITRE ATT&CK.
Experience with big-data analytical tools, such as Elasticsearch, for automating security deployments and compliance checks.
Ability to run & interpret network scans using tools such as Tenable Nessus, Qualys, Rapid7 InsightVM, or OpenVAS.
Ability to interpret CVSS scores and prioritize risk.
Four or more years of hands-on experience working with internet-scale data sets such as Netflow, BGP, DNS, and IDS logs.
Knowledge and experience in one or more of statistics, data visualization, anomaly detection, machine learning, and system administration.
Knowledge of network-based, system-level, and application-layer attacks and mitigation methods.
Experience with a variety of leading SQL and NoSQL technologies, UNIX or Linux systems engineering expertise with a variety of variants, and security tools including Firewalls, VPNs, IDS/IPS, DDoS mitigation, and encryption for data in transit (e.g., IPsec, or TLS) and at rest.
Expert in conflict resolution and negotiation to ensure that design, strategy, and decisions consistently support security requirements.

Responsibilities

Identifying technology gaps to lead in the design, architecture, and implementation of appropriate security solutions.
Creating formal guidelines, policies, and procedures to ensure smooth and error-free operations.
Implementing strategic solutions in a highly scalable environment.
Partner across the Operations, Engineering, and Planning organizations to ensure secure design patterns are embedded into new deployments and major changes.
Working independently on strategic technical challenges.
Identifying opportunities to mentor junior engineers, guide, and delegate technical documentation/tasks to support the team and broader organization.
Communicating clearly and effectively, articulating complex technical concepts to diverse internal and external audiences.
Lead network security incident response activities including triage, containment, eradication, and recovery for disruptive threats.
Build and refine incident playbooks and response runbooks, ensuring repeatable workflows for high-impact scenarios (ransomware, phishing, insider threat, DDoS, etc).
Serve as escalation support for security related investigations, providing expert-level analysis and guidance during active incidents.
Execute root cause analysis and produce clear incident reports outlining timeline, impact, evidence, and remediation recommendations.
Conduct proactive threat hunting across the identity, endpoint, network telemetry to uncover adversary behavior and reduce dwell time.
Create and tune threat detections using SIEM (Security Information and Event Management) to improve alert fidelity and reduce false positives.
Drive continuous improvement of network visibility and telemetry collection to strengthen detection and response capabilities.
Perform regular security control assessments validating configuration effectiveness and closing gaps discovered during incidents or hunts.