You want more out of a career. A place to share your ideas freely — even if they’re daring or different. Where the true you can learn, grow, and thrive. At Verizon, we power and empower how people live, work and play by connecting them to what brings them joy. We do what we love — driving innovation, creativity, and impact in the world. Our V Team is a community of people who anticipate, lead, and believe that listening is where learning begins. In crisis and in celebration, we come together — lifting our communities and building trust in how we show up, everywhere & always. Want in? Join the #VTeamLife.
The Verizon Cyber Security Team is looking for a Principal Security Engineer to lead our Red Team and Adversary Simulation capability within Technology Product Development (TPD). In this role, you will evolve our offensive security posture beyond standard vulnerability discovery. Your mission is to rigorously test and elevate our organization's People, Processes, and Technology against realistic, advanced threats. We do not exist merely to find missing patches; we act as a catalyst to ensure Verizon is resilient against the threats of tomorrow.
This team rejects the notion that Red Teaming is defined by a checklist of scanners. We are looking for a true builder-hacker hybrid—someone who natively speaks the language of modern software engineering and treats offensive operations as an engineering discipline. You will prioritize strategy over tooling, emulating adversary Tactics, Techniques, and Procedures (TTPs) to test our Threat Management Center's (TMC) detection pipelines. You will operate as a true partner, culminating every campaign with collaborative Purple Team exercises to empower developers to build secure, resilient products from the ground up.
Lead Adversary Simulations: Design and execute complex, objective-based Red Team campaigns modeled on real-world adversaries targeting the telecom industry, utilizing the MITRE ATT&CK framework.
Target Modern Architectures & AI Ecosystems: Focus attacks on the modern software supply chain, full-stack applications (Node, Angular, Java), and cloud environments. Spearhead offensive engagements against AI-driven applications, including testing Model Context Protocol (MCP) integrations, custom LLM agents, and human-in-the-loop (HITL) validations.
AI-Augmented Offensive Operations: Actively leverage generative AI and modern tooling to accelerate vulnerability research, automate custom payload generation, and scale red team workflows.
Test Detection and Response: Operate with stealth and precision to evaluate Verizon's logging, alerting, and incident response pipelines in real-time, focusing on "Living off the Land" methodologies.
Drive True Purple Teaming: Embrace a Gray/White-box methodology by walking alongside product and development teams. Lead post-campaign replay exercises with the Blue Team and developers to build robust detection rules and secure coding practices.
Manage Attack Infrastructure as Code: Design, deploy, and maintain dedicated, external cloud attack infrastructure (AWS/GCP) off-network using automated CI/CD pipelines to accurately mirror sophisticated threat actors.
Enforce Uncompromising RoE: Establish explicit Rules of Engagement, ensure comprehensive asset inventories, and maintain strict operational safety and legal compliance during all engagements.
Mentorship & Leadership: Provide expert guidance and technical mentorship to junior Red Team operators and penetration testers.
Bachelor’s degree with six or more years of extensive work experience in a relevant security field.
Six or more years of dedicated, hands-on experience in Red Teaming, adversary simulation, or advanced offensive security.
Should have one of these core offensive security certifications: OSCP, CRTO, CRTP, or GXPN.
A deep, practical understanding of the MITRE ATT&CK framework, Threat Intelligence integration, and APT emulation, including bypassing modern EDR/XDR solutions.
Practical development experience with enterprise tech stacks (specifically Node.js, Angular, and Java) to conduct deep white-box source code reviews, exploit complex web applications, and build bespoke attack tooling.
Applied knowledge of AI security risks and usage, including prompt engineering, LLM jailbreaking, manipulating AI agent frameworks/APIs (e.g., MCP), and using AI models to accelerate offensive workflows.
Expertise in configuring, safely utilizing, and modifying Command and Control (C2) frameworks (e.g., Cobalt Strike, Mythic, Sliver).
Demonstrated experience in collaborative Purple Teaming, translating highly technical attack narratives into actionable detection engineering rules and remediation strategies.
Even better if you have one or more of the following:
In-depth knowledge of securing and attacking cloud-native architectures, containerization platforms (Docker, Kubernetes), and modern CI/CD pipelines.
Highly recognized advanced certifications such as OSEP, OSWE, OSED, or advanced cloud security architecture certifications.
Mastery of programming and scripting languages (such as C#, C++, Go, Rust, Python, Bash, or PowerShell) to develop bespoke implants, droppers, and evasive tooling on the fly.
A strong understanding of continuous attack surface management methodologies and advanced OSINT collection.
Familiarity with the specific threat landscape and operational footprint of the telecommunications industry.
Exceptional executive communication skills, with the ability to translate technical adversary simulation findings into strategic business risks for senior leadership and legal counsel.
If Verizon and this role sound like a fit for you, we encourage you to apply even if you don’t meet every “even better” qualification listed above.
In this hybrid role, you'll have a defined work location that includes work from home and assigned office days set by your manager.
40
Verizon is an equal opportunity employer. We evaluate qualified applicants without regard to race, gender, disability or any other legally protected characteristics.
