Principal Red Team Operator

What you will be doing: The Verizon Cyber Security (VCS) organization enables the business by protecting assets and information across Verizon networks, infrastructure and applications. VCS integrates cybersecurity governance, policies, technologies and operations across Verizon, and works to incorporate security into the design of technology systems and services. Verizon Cyber Security (VCS) is looking for a Red Team Operator for our Enterprise Red Team. In this role, you will lead the creation and execution of red team campaigns and penetration tests designed to evaluate and enhance our personnel, procedures, and technology. You will conduct objective-oriented campaigns across diverse Verizon targets, identifying vulnerabilities in systems, applications, and processes to build effective, real-world attack strategies. The ideal candidate will have the ability to emulate adversarial thinking, and possess a deep understanding of operating system security, networking protocols, firewalls, databases and middleware applications, forensics, scripting and programming, and phishing techniques. Additionally, the candidate will have the ability to communicate highly technical information to internal customers to align with VCS and broader Verizon objectives. Responsibilities: Leading and executing end-to-end Red Team assessments, including adversary/threat simulation and emulation, social-engineering testing, and cybersecurity control bypass techniques. Developing adversary emulation plans that align with MITRE ATT&CK by incorporating cyber threat intelligence. Configuring and safely utilizing attacker tools, tactics, and procedures for Verizon environments. Developing presentations and reports that effectively communicate to both technical and executive audiences. Assisting offensive security assessment operations in support of Red, Blue, and Purple Teams. Planning and executing comprehensive penetration testing exercises, including vulnerability scanning, network reconnaissance, and exploitation of identified weaknesses. Continuously enhancing the organization's security posture by sharing knowledge and expertise with other security team members. Effectively communicating findings and strategies to client stakeholders, including technical staff, executive leadership, and legal counsel. Providing risk-appropriate and pragmatic recommendations to correct found vulnerabilities. Developing scripts, tools, or methodologies to enhance Verizon's red teaming and penetration testing processes and tradecraft. Providing leadership and guidance to advance the offensive capabilities of the team and its subsequent ability to defend the Verizon Enterprise. What we are looking for: Bachelor's degree or four or more years of experience. Six or more years of relevant experience, demonstrated through one or a combination of job-related work experience, military experience, or specialized training or education (non-collegiate). Six or more years of direct offensive security experience, specifically leading engagements in Adversary Emulation, Adversary Simulation, Threat Emulation or Threat Simulation. Even better if you have one or more of the following: Proven ability to modify TTPs to evade modern EDR/NDR/XDR solutions and bypass security controls like AMSI and ETW. Deep knowledge of Operating System internals (Windows, Linux, macOS) including memory management, process injection, API hooking, and kernel-level structures. Thorough understanding of network protocols, with the ability to design covert command-and-control channels that blend with legitimate traffic. Expertise in Active Directory and Azure AD attacks, including advanced techniques such as Kerberoasting, DCSync, Golden Ticket, and identity federation exploits. Implementation-level familiarity with modern exploitation, including buffer overflows, heap spraying, ROP chains, and logic flaws. Advanced proficiency in reading and modifying code in languages such as C#, C/C++, Go, or Java for the purpose of exploit development and custom tooling. Solid understanding of cloud-native environments, specifically containerization platforms (Docker, Kubernetes) and major cloud infrastructure (AWS, Azure, GCP). Advanced industry certifications such as OSEP, OSED, GXPN, CRTO, or OSCP/OSWE. A track record of continuous evolution, demonstrated by participation in CTFs, contributions to open-source security tools, or speaking at industry conferences. Fluency in Blue Team processes and technologies (SIEM logic, threat hunting, SOC triage) to better simulate realistic threats and provide actionable feedback. Demonstrated proficiency in scripting and automation (Python, Bash, PowerShell) to develop custom offensive security tooling and bypass security controls. A degree in a technical field. If Verizon and this role sound like a fit for you, we encourage you to apply even if you don't meet every "even better" qualification listed above. Where you’ll be working In this hybrid role, you’ll have a defined work location that includes working from home and a minimum of three days per week in the office, which will be set by your manager. Employees are responsible for maintaining compliance with hybrid work policies. Scheduled Weekly Hours: 40 Equal Employment Opportunity Verizon is an equal opportunity employer. We evaluate qualified applicants without regard to veteran status, disability or other legally protected characteristics. Benefits and Compensation Our benefits are designed to help you move forward in your career, and in areas of your life outside of Verizon. From health and wellness benefit options including: medical, dental, vision, short and long term disability, basic life insurance, supplemental life insurance, AD&D insurance, identity theft protection, pet insurance and group home & auto insurance. We also offer a matched 401(k) savings plan, up to 8 company paid holidays per year and up to 6 personal days per year, paid parental leave, adoption assistance and tuition assistance, plus other incentives, we've got you covered with our award-winning total rewards package. Depending on the role, employees have the opportunity to receive compensation in the form of premium pay such as overtime, shift differential, holiday pay, allowances, etc. Newly hired employees receive up to 15 days of vacation per year, which grows with additional service. For part-timers, your coverage will vary as you may be eligible for some of these benefits depending on your individual circumstances. The salary will vary depending on your location and confirmed job-related skills and experience. This is an incentive based position with the potential to earn more. For part-time roles, your compensation will be adjusted to reflect your hours. The annual salary range for the location(s) listed on this job requisition based on a full-time schedule is: $120,500.00 - $231,000.00. #J-18808-Ljbffr