Engineer III, Security Engineer

What you'll be doing

The GN&T Network Security team is looking for a highly motivated and experienced Engineer to join the Network Security Defense team. The Defense teams are responsible for owning the security lifecycle and effectiveness across the Core, Edge, and Access networks, as well as all systems and network functions within GN&T. This role is on the Management Network Defense team. At Verizon, network security ensures the reliability of global communications.

You will defend against some of the most sophisticated state-sponsored and criminal actors in the world.

• Lead Security Improvements:
  Drive the identification of security gaps and lead the design, architecture, and implementation of appropriate security solutions.
• Collaborative Design:
  Partner across Operations, Engineering, and Planning organizations to ensure secure design patterns are embedded into new deployments and major changes.
• Strategic Problem Solving:
  Work with lead engineers on strategic security technical challenges and complex investigations.
• Security Assessments:
  Perform regular security control assessments to validate configuration effectiveness and close gaps discovered during active hunts.
• Technical Communication:
  Articulate complex technical concepts clearly to diverse internal and external audiences. Develop essential technical documentation, including playbooks, Confluence pages, Network diagrams, and Method of Procedures (MOPs).

• Management Network: Hands‑on experience with securing/hardening management or out‑of‑band (OOB) networks that support telemetry services.
• Network Fundamentals: Knowledge of TCP/IP protocols including CIDR and NAT techniques, DNS, and flow data (Net Flow/IPFIX) to distinguish between legitimate traffic and malicious patterns.
• Network Operations: Experience with network monitoring, network configuration including break/fix and maintenance process.
• Security Architecture: Designing and implementing defense‑in‑depth strategies, including firewalls, encryption, centralized Identity and Access Management and Multi‑Factor Authentication (MFA).
• SIEM Threat Detection: Familiarity with threat detections using SIEM platforms like Splunk to improve alert fidelity.

• Bachelor's degree or three or more years of relevant work experience in network security or a related field.
• Deep understanding of network fundamentals (TCP/IP, DNS), the OSI model and protocols associated with each layer and advanced knowledge of router operations, including distinction between Control Plane, Data Plane, and Management Plane security.
• Knowledge of routing protocols (BGP, OSPF, IS‑IS) and how to protect them from hijacking or manipulation.
• Experience analyzing Net Flow/IPFIX data to distinguish between legitimate traffic and malicious patterns.
• Experience supporting, configuring and troubleshooting network equipment from major telecommunications vendors such as Cisco, F5, Arista, Juniper, or Palo Alto.
• Experience with scripting languages like Python, Powershell, Perl, and/or automation tools in a network environment.
• Demonstrated organization and project management skills including proactive ownership of network investigations with a proven track record of effective collaboration with peer engineers to resolve complex network issues or network security incidents.
• Effective written and verbal communication skills for cross‑functional collaboration.
• Willingness to hold a flexible schedule as required to meet the security needs of the business, including possibility of working maintenance windows as needed for network change management.

• Advanced Splunk
  
  Skills:
  
  Ability to write complex, optimized SPL (Splunk Search Language), including data models, lookups, and dashboards for threat analysis.
• AI Tooling:
  Experience utilizing Claude Code or other AI tools for script and configuration authoring.
• Certifications:
  
  Security (CISSP, CISM, OSCP, Security+) or Networking (PCNSE, CCNP, CCNA).
• Internet‑Scale Data:
  Hands‑on experience with Netflow, BGP, DNS, and IDS logs at scale.
• Incident Frameworks:
  Fluency in security frameworks, particularly the application of CIS Benchmarks (Level 1 & 2…