Senior Security Engineer

Job Description

When you join Verizon

You want more out of a career. A place to share your ideas freely — even if they’re daring or different. Where the true you can learn, grow, and thrive. At Verizon, we power and empower how people live, work and play by connecting them to what brings them joy. We do what we love — driving innovation, creativity, and impact in the world. Our V Team is a community of people who anticipate, lead, and believe that listening is where learning begins. In crisis and in celebration, we come together — lifting our communities and building trust in how we show up, everywhere & always. Want in? Join the V Team Life.

What you’ll be doing...
In an effort to customize and drive greater value out of Verizon’s Managed Security Services and Products, Verizon clients have the ability to add additional support via a Client Security Engineer (CSE). The Client Security Engineer (CSE) is an integral part of the managed security solution. Our CSEs partner with the customer’s network and security architects and engineers to create security designs based on best practices and customized to meet the customer security policies. They will ensure that new designs support appropriate capacity levels and then provide ongoing capacity management through-out the design life cycle. The CSE is tasked with lifecycle ownership of the environment and works closely with the Security Operations Center, Security Analysts, and backend Verizon MSS teams to provide Tiers 3 and 4 level operational support in the areas of problem resolution and complex technical remediations.

As part of the solution, the CSE can be engaged to provide proactive project proposals based on capacity monitoring and operational challenges. All security designs are created to support SLA and are therefore optimized to support business continuity. Where possible, we will also look for opportunities to consolidate infrastructure to reduce cost and/or dedicated lanes built for high priority applications. The CSE team has extensive experience with complex designs including those associated with the wide variety of vendor platforms supported by MSS and the industry. The CSE will be creating technically sound security designs that are compliant with the customer’s security policies, industry best practices, and manageable from the 24x7 SOC.

In this role, you will...

• Assist the client in overcoming complex network and security technical challenges as you help move the network and security engagements forward with new technology, features and functionality, which includes conducting product and technology evaluations.

• Conduct requirements mapping, technical consulting, project response, level of effort determination, equipment specification, and implementation recommendations and guidance.

• Minimize the risk of negative effects resulting from poorly planned network changes.

• Determine the appropriate hardware and software features and functionality required for a change or enhancement.

• Verify that the new hardware and software levels are interoperable with the existing legacy network.

• Carry the customer forward with new technology while attempting to protect the customer’s investment in the process.

• Give technical advice and guidance on network cutovers and implementation plans while understanding how these changes/modifications can affect the customer’s business.

• Maintain quality assurance through adherence to established process, procedures, baselines, and CPE standards.

• Maintain standards, CPE, and version control for custom MSS engagements

• Act as the technical security and network liaison between the customer and Verizon for problem resolution assistance with regards to critical network engineering, security engineering, and change management issues.

• Proactively generate proposals for recommended, corrective, courses of action based on problem management or RCA reports

• Define action plans that are easy to implement, effective at reducing risk, and as much as possible will take advantage of existing people, processes, and technologies.

• With the Security Services Advisor (SSA), participate in status calls to discuss risk intelligence, incidents, vulnerability details, change request, implementation state, compliance state, and/or risk state.

• Be involved in MTO, Merger, and Separation duties, supporting Management Take Over (MTO) for custom MSS client contracts.

• Be involved in due diligence and documentation associated with complex Association and Application flow determination, which forms the foundation for managed changes and incident management in highly visible perimeter environments.

• Provide 3rd or 4th level Operations Support.

Where you'll be working...
In this hybrid role, you'll have a defined work location of either Cary, NC or Ashburn, VA that includes work from home and assigned office days set by your manager

You’ll need to have:

• Four or more years of proven work experience

• Four or more years of experience as a Security Engineer and Architect

• Four or more years of experience designing enterprise security networks

• Four or more years of experience with at least one firewall vendor (Palo Alto, Checkpoint, Cisco, Fortinet)

• Experience in multiple vendor devices & technologies including EDR, SIEM, UTM, IDS/IPS, Firewalls, Proxies and NAC

• Experience with both security infrastructure and security analytics technologies

• Experience with network switches and routers.

• Experience working in a customer facing security engineering role

• Ability to travel occasionally

• Flexibility to work outside of normal business hours when needed

Even better if you also have...

• A Degree in a technical field

• Six or more years of work experience designing security networks at an enterprise level

• Expert level experience and certifications with at least one firewall vendor (Palo Alto, Checkpoint, Cisco, Fortinet)

• Expert knowledge of Microsoft Windows and Linux operating systems

• Experience with cloud platforms like AWS and Microsoft Azure

• Advanced knowledge of scripting languages (Python/Powershell), programming, and DevOps

• Solid knowledge of Microsoft Windows and Linux operating systems

• Knowledge of a common scripting language (preferably Python) and basic experience in DevOps

• Excellent communication skills, listening as well as oral and written from the Engineer to Executive level

• Ability to be a self-starter and work individually with limited guidance

• Excellent time management skills to balance between clients

• Solid knowledge of network products & technologies with industry recognized certifications (CCNA, CCNP, CCIE)

• Cybersecurity certifications from SANS or ISC² (CISSP, GCIH, GPEN, GMON, etc)

• Knowledge of a SIEM solution (Splunk, RSA, Securonix, etc..) as well as the creation, maintenance and development of Detection Content

• Experience in the areas of Incident Response and the SOC

• Knowledge and work experience of IDS/IPS tuning

• Experience with third party cloud solutions (Zscaler, iBoss, Cylance)

• Experience with Vulnerability Management solutions (Qualys, Nessus)

• Experience with Policy Assessment tools (Tufin, Algosec, Firemon, Skybox)

If Verizon and this role sound like a fit for you, we encourage you to apply even if you don’t meet every “even better” qualification listed above.

Where you’ll be working

In this hybrid role, you'll have a defined work location that includes work from home and a minimum eight assigned office days per month that will be set by your manager.

Scheduled Weekly Hours

40

Equal Employment Opportunity

We’re proud to be an equal opportunity employer - and celebrate our employees’ differences, including race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, and Veteran status. At Verizon, we know that diversity makes us stronger. We are committed to a collaborative, inclusive environment that encourages authenticity and fosters a sense of belonging. We strive for everyone to feel valued, connected, and empowered to reach their potential and contribute their best. Check out our diversity and inclusion page to learn more.