Engr IV-Security Engineering

You want more out of a career. A place to share your ideas freely even if theyre daring or different. Where the true you can learn grow and thrive. At Verizon we power and empower how people live work and play by connecting them to what brings them joy. We do what we love driving innovation creativity and impact in the world. Our V Team is a community of people who anticipate lead and believe that listening is where learning crisis and in celebration we come together lifting our communities and building trust in how we show up everywhere & always. Want in Join the #VTeamLife.

What youll be doing...

The Verizon Cyber Security Team is looking for a highly skilled Security Engineer (Engr IV) to drive our Red Team and Adversary Simulation capability within Technology Product Development (TPD). In this role you will elevate our offensive security posture beyond standard vulnerability discovery. Your mission is to rigorously test our organizations People Processes and Technology against realistic advanced threats. We do not exist merely to find missing patches; we act as a catalyst to ensure Verizon is resilient against the threats of tomorrow.

This team rejects the notion that Red Teaming is defined by a checklist of scanners. We are looking for a true builder-hacker hybridsomeone who natively speaks the language of modern software engineering and treats offensive operations as an engineering discipline. You will prioritize strategy over tooling emulating adversary Tactics Techniques and Procedures (TTPs) to test our Threat Management Centers (TMC) detection pipelines. You will operate as a true partner culminating campaigns with collaborative Purple Team exercises to empower developers to build secure resilient products from the ground up while enforcing strict cyber hygiene across the enterprise.

• Execute Adversary Simulations: Design and execute complex objective-based Red Team campaigns modeled on real-world adversaries targeting the telecom industry utilizing the MITRE ATT&CK framework.

• Target Modern Architectures & AI Ecosystems: Focus attacks on the modern software supply chain full-stack applications (Node Angular Java) and cloud environments. Participate in offensive engagements against AI-driven applications including testing Model Context Protocol (MCP) integrations custom LLM agents and human-in-the-loop (HITL) validations.

• Validate Cyber Hygiene & Compliance: Look beyond complex exploit chains to identify and expose systemic failures in foundational cyber hygiene. Map campaign findings against enterprise security policies and regulatory compliance requirements to prove where technical controls are failing.

• AI-Augmented Offensive Operations: Actively leverage generative AI and modern tooling to accelerate vulnerability research automate custom payload generation and enhance red team workflows.

• Test Detection and Response: Operate with stealth and precision to evaluate Verizons logging alerting and incident response pipelines in real-time focusing on Living off the Land methodologies.

• Drive True Purple Teaming: Embrace a Gray/White-box methodology by collaborating closely with product and development teams. Conduct post-campaign replay exercises with the Blue Team and developers to build robust detection rules and secure coding practices.

• Manage Attack Infrastructure as Code: Deploy and maintain dedicated external cloud attack infrastructure (AWS/GCP) off-network using automated CI/CD pipelines to mirror sophisticated threat actors.

• Enforce Uncompromising RoE: Adhere to explicit Rules of Engagement ensure comprehensive asset inventories and maintain strict operational safety and legal compliance during all engagements.

• Mentorship & Collaboration: Provide technical guidance and peer mentorship to junior Red Team operators and penetration testers.

• Bachelors degree with four or more years of work experience in a relevant security field.

• Four or more years of dedicated hands-on experience in Red Teaming adversary simulation or advanced penetration testing.

• Should have one of these core offensive security certifications: OSCP CRTO CRTP or GXPN.

• Understanding of the MITRE ATT&CK framework Threat Intelligence integration and APT emulation including experience bypassing modern EDR/XDR solutions.

• Development experience with enterprise tech stacks (specifically Angular and Java) to conduct white-box source code reviews exploit complex web applications and build bespoke attack tooling.

• Applied knowledge of AI security risks and usage including prompt engineering LLM jailbreaking manipulating AI agent frameworks/APIs (e.g. MCP) and using AI models to accelerate offensive workflows.

• Knowledge of enterprise cyber hygiene principles industry security frameworks (e.g. NIST CSF CIS Controls) and experience translating offensive findings into actionable data for compliance risk and audit stakeholders.

• Expertise in configuring and safely utilizing Command and Control (C2) frameworks (e.g. Cobalt Strike Mythic Sliver).

• Demonstrated experience in collaborative Purple Teaming translating technical attack narratives into actionable detection engineering rules.

Even better if you have one or more of the following:

• A Masters degree in a relevant technical field.

• In-depth knowledge of securing and attacking cloud-native architectures containerization platforms (Docker Kubernetes) and modern CI/CD pipelines.

• Highly recognized advanced certifications such as OSEP OSWE OSED or advanced cloud security architecture certifications.

• Proficiency in programming and scripting languages (such as C# C Go Rust Python Bash or PowerShell) to develop custom implants droppers and evasive tooling.

• A solid understanding of continuous attack surface management methodologies and advanced OSINT collection.

• Familiarity with regulatory compliance frameworks relevant to the telecommunications industry (e.g. SOX PCI-DSS CPNI).

• Strong communication skills with the ability to translate technical findings into clear actionable risks for management and engineering teams.

If Verizon and this role sound like a fit for you we encourage you to apply even if you dont meet every even better qualification listed above.

Verizon is an equal opportunity employer. We evaluate qualified applicants without regard to race gender disability or any other legally protected characteristics.