Engr IV-Security Engineering

When you join Verizon You want more out of a career. A place to share your ideas freely even if theyre daring or different. Where the true you can learn, grow, and thrive. At Verizon, we power and empower how people live, work and play by connecting them to what brings them joy. We do what we love driving innovation, creativity, and impact in the world. Our V Team is a community of people who anticipate, lead, and believe that listening is where learning begins. In crisis and in celebration, we come together lifting our communities and building trust in how we show up, everywhere & always. Want in Join the #VTeamLife. What youll be doing. The Verizon Cyber Security Team is looking for a highly skilled Security Engineer (Engr IV) to drive our Red Team and Adversary Simulation capability within Technology Product Development (TPD). In this role, you will elevate our offensive security posture beyond standard vulnerability discovery. Your mission is to rigorously test our organization's People, Processes, and Technology against realistic, advanced threats. We do not exist merely to find missing patches; we act as a catalyst to ensure Verizon is resilient against the threats of tomorrow. This team rejects the notion that Red Teaming is defined by a checklist of scanners. We are looking for a true builder-hacker hybridsomeone who natively speaks the language of modern software engineering and treats offensive operations as an engineering discipline. You will prioritize strategy over tooling, emulating adversary Tactics, Techniques, and Procedures (TTPs) to test our Threat Management Center's (TMC) detection pipelines. You will operate as a true partner, culminating campaigns with collaborative Purple Team exercises to empower developers to build secure, resilient products from the ground up while enforcing strict cyber hygiene across the enterprise. Execute Adversary Simulations: Design and execute complex, objective-based Red Team campaigns modeled on real-world adversaries targeting the telecom industry, utilizing the MITRE ATT&CK framework.Target Modern Architectures & AI Ecosystems: Focus attacks on the modern software supply chain, full-stack applications (Node, Angular, Java), and cloud environments. Participate in offensive engagements against AI-driven applications, including testing Model Context Protocol (MCP) integrations, custom LLM agents, and human-in-the-loop (HITL) validations.Validate Cyber Hygiene & Compliance: Look beyond complex exploit chains to identify and expose systemic failures in foundational cyber hygiene. Map campaign findings against enterprise security policies and regulatory compliance requirements to prove where technical controls are failing.AI-Augmented Offensive Operations: Actively leverage generative AI and modern tooling to accelerate vulnerability research, automate custom payload generation, and enhance red team workflows.Test Detection and Response: Operate with stealth and precision to evaluate Verizon's logging, alerting, and incident response pipelines in real-time, focusing on "Living off the Land" methodologies.Drive True Purple Teaming: Embrace a Gray/White-box methodology by collaborating closely with product and development teams. Conduct post-campaign replay exercises with the Blue Team and developers to build robust detection rules and secure coding practices.Manage Attack Infrastructure as Code: Deploy and maintain dedicated, external cloud attack infrastructure (AWS/GCP) off-network using automated CI/CD pipelines to mirror sophisticated threat actors.Enforce Uncompromising RoE: Adhere to explicit Rules of Engagement, ensure comprehensive asset inventories, and maintain strict operational safety and legal compliance during all engagements.Mentorship & Collaboration: Provide technical guidance and peer mentorship to junior Red Team operators and penetration testers. What Were Looking For Youll need to have: Bachelors degree with four or more years of work experience in a relevant security field.Four or more years of dedicated, hands-on experience in Red Teaming, adversary simulation, or advanced penetration testing.Should have one of these core offensive security certifications: OSCP, CRTO, CRTP, or GXPN.Understanding of the MITRE ATT&CK framework, Threat Intelligence integration, and APT emulation, including experience bypassing modern EDR/XDR solutions.Development experience with enterprise tech stacks (specifically Node.js, Angular, and Java) to conduct white-box source code reviews, exploit complex web applications, and build bespoke attack tooling.Applied knowledge of AI security risks and usage, including prompt engineering, LLM jailbreaking, manipulating AI agent frameworks/APIs (e.g., MCP), and using AI models to accelerate offensive workflows.Knowledge of enterprise cyber hygiene principles, industry security frameworks (e.g., NIST CSF, CIS Controls), and experience translating offensive findings into actionable data for .