Engineer III, Security Engineer

What you'll be doing The GN&T Network Security team is looking for a highly motivated and experienced Engineer to join the Network Security Defense team. The Defense teams are responsible for owning the security lifecycle and effectiveness across the Core, Edge, and Access networks, as well as all systems and network functions within GN&T. This role is on the Management Network Defense team. At Verizon, network security ensures the reliability of global communications. You will defend against some of the most sophisticated state-sponsored and criminal actors in the world. Responsibilities Lead Security Improvements: Drive the identification of security gaps and lead the design, architecture, and implementation of appropriate security solutions. Collaborative Design: Partner across Operations, Engineering, and Planning organizations to ensure secure design patterns are embedded into new deployments and major changes. Strategic Problem Solving: Work with lead engineers on strategic security technical challenges and complex investigations. Security Assessments: Perform regular security control assessments to validate configuration effectiveness and close gaps discovered during active hunts. Technical Communication: Articulate complex technical concepts clearly to diverse internal and external audiences. Develop essential technical documentation, including playbooks, Confluence pages, Network diagrams, and Method of Procedures (MOPs). Qualifications Management Network: Hands‑on experience with securing/hardening management or out‑of‑band (OOB) networks that support telemetry services. Network Fundamentals: Knowledge of TCP/IP protocols including CIDR and NAT techniques, DNS, and flow data (NetFlow/IPFIX) to distinguish between legitimate traffic and malicious patterns. Network Operations: Experience with network monitoring, network configuration including break/fix and maintenance process. Security Architecture: Designing and implementing defense‑in‑depth strategies, including firewalls, encryption, centralized Identity and Access Management and Multi‑Factor Authentication (MFA). SIEM Threat Detection: Familiarity with threat detections using SIEM platforms like Splunk to improve alert fidelity. Requirements Bachelor's degree or three or more years of relevant work experience in network security or a related field. Deep understanding of network fundamentals (TCP/IP, DNS), the OSI model and protocols associated with each layer and advanced knowledge of router operations, including distinction between Control Plane, Data Plane, and Management Plane security. Knowledge of routing protocols (BGP, OSPF, IS‑IS) and how to protect them from hijacking or manipulation. Experience analyzing NetFlow/IPFIX data to distinguish between legitimate traffic and malicious patterns. Experience supporting, configuring and troubleshooting network equipment from major telecommunications vendors such as Cisco, F5, Arista, Juniper, or Palo Alto. Experience with scripting languages like Python, Powershell, Perl, and/or automation tools in a network environment. Demonstrated organization and project management skills including proactive ownership of network investigations with a proven track record of effective collaboration with peer engineers to resolve complex network issues or network security incidents. Effective written and verbal communication skills for cross‑functional collaboration. Willingness to hold a flexible schedule as required to meet the security needs of the business, including possibility of working maintenance windows as needed for network change management. Preferred Qualifications Advanced Splunk Skills: Ability to write complex, optimized SPL (Splunk Search Language), including data models, lookups, and dashboards for threat analysis. AI Tooling: Experience utilizing Claude Code or other AI tools for script and configuration authoring. Certifications: Security (CISSP, CISM, OSCP, Security+) or Networking (PCNSE, CCNP, CCNA). Internet‑Scale Data: Hands‑on experience with Netflow, BGP, DNS, and IDS logs at scale. Incident Frameworks: Fluency in security frameworks, particularly the application of CIS Benchmarks (Level 1 & 2 hardening) and mitigating MITRE ATT&CK Tactics, Techniques, and Procedures (TTPs) on network devices. Advanced Analytics: Experience with risk‑based alerting, asset/identity correlation, and big data tools like Elasticsearch. System Engineering: Unix or Linux expertise and experience with encryption (IPsec, TLS) and DDoS mitigation. Security Tooling: Experience effectively utilizing EDR (Endpoint Detection & Response) tools such as CrowdStrike or threat investigation tools such as NETSCOUT OCI (Omnis Cyber Intelligence). Where you'll be working In this hybrid role, you'll have a defined work location that includes working from home and a minimum of three days per week in the office, which will be set by your manager. Employees are responsible for maintaining compliance with hybrid work policies. In order to be eligible to apply for this position, you must be within commuting distance of one of those locations. Scheduled Weekly Hours 40 hours per week. Equal Employment Opportunity Verizon is an equal opportunity employer. We evaluate qualified applicants without regard to veteran status, disability or other legally protected characteristics. Benefits and Compensation Our benefits are designed to help you move forward in your career, and in areas of your life outside of Verizon. From health and wellness benefit options including medical, dental, vision, short and long term disability, basic life insurance, supplemental life insurance, AD&D insurance, identity theft protection, pet insurance and group home & auto insurance. We also offer a matched 401(k) savings plan, up to 8 company paid holidays per year and up to 6 personal days per year, paid parental leave, adoption assistance and tuition assistance, plus other incentives, we've got you covered with our award‑winning total rewards package. Depending on the role, employees have the opportunity to receive compensation in the form of premium pay such as overtime, shift differential, holiday pay, allowances, etc. Newly hired employees receive up to 15 days of vacation per year, which grows with additional service. For part‑timers, your coverage will vary as you may be eligible for some of these benefits depending on your individual circumstances. The salary will vary depending on your location and confirmed job‑related skills and experience. This is an incentive‑based position with the potential to earn more. For part‑time roles, your compensation will be adjusted to reflect your hours. The annual salary range for the location(s) listed on this job requisition based on a full‑time schedule is: $81,000.00 – $155,000.00. If Verizon and this role sound like a fit for you, we encourage you to apply even if you don't meet every even better qualification listed above. If you believe this job posting is missing information required by the Virginia wage or salary range transparency law, please report it via View email address on click.appcast.io. #J-18808-Ljbffr Verizon