Principal Engineer Network Security Routing and Switching

When you join Verizon

You want more out of a career. A place to share your ideas freely - even if they're daring or different. Where the true you can learn, grow, and thrive. At Verizon, we power and empower how people live, work and play by connecting them to what brings them joy. We do what we love - driving innovation, creativity, and impact in the world.

Our V Team is a community of people who anticipate, lead, and believe that listening is where learning begins. In crisis and in celebration, we come together - lifting our communities and building trust in how we show up, everywhere & always. Want in? Join the #VTeamLife.

The Global Network & Technology team seeks a highly motivated Network Security Engineer to secure and harden Verizon’s critical network. You will step into a high-impact role where your deep expertise in network security will directly shape our defense posture, from mapping network defenses to the MITRE ATT&CK matrix to leading the hardening of Edge routing and Leaf-Spine data center fabrics with "Gold Standard" CIS Benchmarks.

Your background should include in-depth knowledge of Cisco/Nokia products, driving PSIRT closures, and overseeing the crucial segmentation strategy. You will leverage your subject matter expertise in a wide array of networking gear across VZ Edge network.

If you are passionate about identifying vulnerabilities, performing comprehensive security assessments, and driving critical automation, this is your chance to lead and secure a vast, carrier-grade network.

• Act as the security subject matter expert in network design reviews, ensuring that all network assets meet stringent carrier-grade security standards.

• Drive security architecture, lead policy implementation, manage incident response, and integrate security principles early into the development lifecycle.

• Analyze network logs and configurations to identify vulnerabilities, recommend & build proactive mitigations.

• Leverage tools or custom automation, eg, Python, Ansible playbooks to run automated audits against security benchmarks, ensuring security compliance. Develop comprehensive assessment reports and provide recommendations for remediation.

• Conduct proactive threat hunting across the identity, endpoint, and network telemetry to uncover adversary behavior and reduce dwell time.

• Build and refine incident playbooks and response runbooks, ensuring repeatable workflows for high-impact scenarios (ransomware, phishing, insider threat, DDoS, etc).

• Lead network security incident response activities, including triage, containment, eradication, and recovery for disruptive threats.

• Execute root cause analysis for incidents, perform regular security control assessments, and lead strategic security solution implementation in a highly scalable environment.

• Drive continuous improvement of network visibility and telemetry collection to strengthen detection and response capabilities.

• Communicate clearly and effectively, articulating complex technical concepts to diverse internal and external audiences.

You’ll need to have:

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field or four or more years of work experience.

• Six or more years of relevant experience required, demonstrated through one or a combination of work and/or military experience, or specialized training.

• Deep expertise working in Carrier/Service Provider Network Engineering and Security, specifically securing Leaf-Spine/CLOS topologies (VXLAN, EVPN, MP-BGP) using technologies like Cisco IOS-XR/NX-OS and Nokia SR OS (TiMOS). Expert-level understanding of routing security, including BGP and IGP security, is mandatory eg: BGP hijacking, Route injection.

• Hands-on experience working with internet-scale data sets such as Netflow, BGP, DNS, and IDS logs.

• Fluency in security frameworks, particularly the application of CIS Benchmarks (Level 1 & 2 hardening) and mitigating MITRE ATT&CK Tactics, Techniques, and Procedures (TTPs) on network devices, along with a solid understanding of network security fundamentals.

• Expertise in using Python, API, Ansible, or Terraform-type tools to automate and develop…