Principal Engineer Offensive Security

You want more out of a career. A place to share your ideas freely - even if they're daring or different. Where the true you can learn, grow, and thrive. At Verizon, we power and empower how people live, work and play by connecting them to what brings them joy. We do what we love - driving innovation, creativity, and impact in the world. Our V Team is a community of people who anticipate, lead, and believe that listening is where learning begins. In crisis and in celebration, we come together - lifting our communities and building trust in how we show up, everywhere & always. Want in? Join the V Team Life.

As an experienced Offensive Security Engineer in the telecommunications industry, you will play a critical role in proactively identifying vulnerabilities and security gaps within Verizon's infrastructure and applications. This role focuses on emulating real-world adversarial techniques to evaluate and improve Verizon's defensive capabilities, ensuring the security of customer data and network infrastructure.

You will collaborate closely with internal teams to scope and execute offensive engagements. As a Principal Engineer, you will work independently to plan and execute tests targeting applications, devices and platforms supporting the Verizon network.

Key Responsibilities:

• Ensuring alignment with the organization's overall cybersecurity strategy, and addressing the unique challenges of securing large-scale telecommunications systems

• Adversary Emulation: Plan and lead Penetration Test projects that identify vulnerabilities in wireline/wireless network infrastructure and supporting applications

• Vulnerability Exploitation: Identify, exploit, and report vulnerabilities in critical telco systems and infrastructure

• Penetration Test Planning: Design and execute penetration tests that provide comprehensive feedback on the security posture and risks of applications, devices and platforms deployed to the Verizon network

• Post-Engagement Reporting: Deliver comprehensive technical reports and executive summaries that outline findings, supporting artifacts, and remediation recommendations. Lead readouts on test results to project teams and leadership

• Collaboration and mentorship: Work closely with stakeholders to scope projects appropriately and work within the team to mentor and upskill pentest staff

• Tool Development: Build or customize tools and scripts to build a consistent and efficient process for testing

• Threat Intelligence: Stay updated on the latest attack techniques, tactics, and procedures (TTPs) relevant to the telecommunications industry

• Continuous Improvement: Provide insights to enhance the organization's security posture through collaboration with peers in both security and operations

You'll need to have:

• Bachelor's degree or four or more years of work experience.

• Six or more years of relevant experience required, demonstrated through one or a combination of work and/or military experience, or specialized training

• Experience in cybersecurity roles, with at least 5 years of hands-on experience conducting red team engagements or advanced penetration testing in large-scale environments.

• Industry Knowledge: Strong foundational knowledge of relevant security vulnerabilities and penetration testing process

• Strong Linux skills.

• Proficiency in penetration testing tools such as Burp Suite, Cobalt Strike, Nmap, Metasploit, etc.

Even better if you have one or more of the following:

• Certifications OSCP, OSCE, or OSEP or GIAC certifications like GPEN, GXPN, or GWAPT

• Familiarity with security challenges in running large enterprise-scale networks, wireless core components, cloud, and edge computing

• Expertise in telecommunications systems, protocols (SIP, SS7/Diameter, TR-69, etc)

• Expertise in 4G/5G core network architecture, and supporting systems

• Strong coding and scripting skills (Python, Bash, PowerShell, etc.). Ability to vet exploit code to understand what it does

• Deep knowledge of network architecture and cloud environments (e.g., Kubernetes, OpenStack, OpenShift)

• Soft Skills: Strong communication and teamwork skills, with the ability to effectively interact with technical and non-technical stakeholders

If Verizon and this role sound like a fit for you, we encourage you to apply even if you don't meet every "even better" qualification listed above

We're proud to be an equal opportunity employer - and celebrate our employees' differences, including race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, and Veteran status. At Verizon, we know that diversity makes us stronger. We are committed to a collaborative, inclusive environment that encourages authenticity and fosters a sense of belonging. We strive for everyone to feel valued, connected, and empowered to reach their potential and contribute their best. Check out our diversity and inclusion page to learn more.