Associate Director, Security Risk Management

Verizon; Ashburn (VA); Hybrid; USD 126,000 - 242,000; Full time

Benefits offered by this job

401(k) matching

8 holidays per year

Personal days (6)

Paid parental leave

Tuition assistance

Job summary

Verizon is seeking a senior security operations leader to direct day-to-day defense operations, oversee remediation roadmaps, and design security exercises. You will partner with product, network, and infrastructure teams to validate controls and track performance metrics.

The role requires extensive experience in customer defense, threat response, and risk remediation across complex environments, with a strong background in cybersecurity frameworks and incident management.

Qualifications

• Bachelor’s degree or 4+ years of relevant work experience.
• 8+ years of relevant work experience in security operations or risk remediation.
• Experience leading teams through change and delivering projects.
• Experience implementing cybersecurity frameworks like NIST CSF/ISO 27000.

Responsibilities

• Direct day-to-day security operations and incident response workflows.
• Oversee remediation roadmaps for security findings from incidents.
• Design and execute security exercises to evaluate readiness.
• Partner with product, network, and infra teams to track remediation.
• Establish KPIs and track time-to-remediate and control effectiveness.
• Refine detection logic to reduce false positives and improve response.

Skills

Leadership

Threat defense

Incident response

Project management

Communication

Education

Bachelor’s Degree or 4+ years exp

Tools

NIST CSF

ISO 27000

MITRE ATT&CK

Cyber Kill Chain

Job description

When you join Verizon You want more out of a career. A place to share your ideas freely — even if they’re daring or different. Where the true you can learn, grow, and thrive. At Verizon, we power and empower how people live, work and play by connecting them to what brings them joy. We do what we love — driving innovation, creativity, and impact in the world. Our V Team is a community of people who anticipate, lead, and believe that listening is where learning begins. In crisis and in celebration, we come together — lifting our communities and building trust in how we show up, everywhere & always. Want in? Join the #VTeamLife.

Primary Job Duties And Responsibilities

• Directing day-to-day customer defense operations, ensuring effective monitoring, threat alerting, and operational incident response workflows.
• Overseeing the mid-term remediation roadmap for security findings originating from customer incidents, vulnerability disclosures, and security exercises.
• Designing and executing complex tabletop and live security exercises to evaluate customer threat readiness, incident response capabilities, and defense mechanisms.
• Partnering with product, network, and infrastructure teams to track risk remediation progress and validate control effectiveness.
• Establishing key performance and risk indicators (KPIs/KRIs) to track response SLAs, time-to-remediate (TTR), and control effectiveness across customer environments.
• Refining alerting models and detection logic for customer security monitoring platforms to reduce false positives and enhance response efficiency.
• Leading root cause analysis (RCA) reviews following customer-impacting security events to translate operational lessons learned into enforceable technical controls.
• Coordinating and leading meetings with relevant stakeholders, business partners, and vendors when necessary.
• Collaborating on efforts to implement mitigating controls to support the growth and maturity of team capabilities.
• Supporting internal and external audit reviews. This includes producing and presenting artifacts and executive summaries to support the overall team’s mission.
• Producing executive-level operational read-outs, metrics, and case reviews that accurately capture the effectiveness of the team. This includes leveraging internal data, threat trends, and operational metrics to clearly communicate the Verizon landscape to senior executives.
• Executing long-term and short-term strategies goals and ensuring proper updates are socialized to appropriate stakeholders.
• Developing and setting clear goals and team expectations to successfully achieve organizational objectives. This includes defining key metrics and trends in the day-to-day operations and implementing changes to support the reduction of time to detect, respond, and remediate key technical security risks.
• Conducting team performance management activities like conducting reviews, check-ins and disciplinary action, as needed.
• Motivating, mentoring, and advising analysts on how to build and maintain skills and techniques needed to produce quality and consistency analysis. This includes hosting focused training sessions to teach new and specialized skill sets.
• Promoting an environment of collaboration and individual accountability when it comes to problem-solving, decision-making, and process improvements.

You’ll Need To Have

• Bachelor’s Degree or four or more years of work experience.
• Eight or more years of relevant work experience required, demonstrated through one or a combination of job-related work experience, military experience, or specialized training or education (non-collegiate).
• Experience with managing employees through change, autonomy and empowerment.
• Previous experience managing projects or teams to develop, execute and complete assignments.
• Previous experience leading customer defense, security operations, threat response, or risk remediation functions.
• Experience managing remediation programs across complex enterprise environments to resolve security exercise and incident findings.
• Experience with implementation of cybersecurity, network defense, and investigative frameworks (such as NIST CSF, ISO 27000 series, MITRE ATT&CK, Lockheed Martin Cyber Kill Chain, etc.) into network defense processes.

Even Better If You Have

• Experience planning and executing cyber drills, red/blue team exercises, or tabletop simulations targeting customer environments.
• Knowledge of SOC or similar environment methodology, including threat monitoring, intrusion detection, analysis, threat determination, incident handling and remediation tracking.
• Familiarity with security orchestration, automated alerting, and incident response tooling tailored for customer threat landscapes.
• Experience interpreting data from network security tools and infrastructure technologies such as SIEM, firewall, proxies, IPS/IDS devices, full packet capture (FPC), and email platforms.
• Knowledge of the cyber threat landscape, including types of adversaries, campaigns, and the motivations that drive them.
• Experience working with analysis techniques, identifying indicators of compromise, threat hunting, and identification of intrusions and potential incidents.
• Understanding of system development life cycle (waterfall & agile) experience.
• Certifications like: CERT's ITPM, Network+, Security+, CISSP, CISM, CFE, CISA, CPCI, CCP, and/or Six Sigma Greenbelt or Lean certification.

If this role sounds like a fit for you, we encourage you to apply even if you don’t meet every "even better" qualification listed above.

Where you’ll be working

In this hybrid role, you'll have a defined work location that includes working from home and a minimum of three days per week in the office, which will be set by your manager. Employees are responsible for maintaining compliance with hybrid work policies.

Scheduled Weekly Hours

40

Equal Employment Opportunity

Verizon is an equal opportunity employer. We evaluate qualified applicants without regard to veteran status, disability or other legally protected characteristics.

Benefits And Compensation

Our benefits are designed to help you move forward in your career, and in areas of your life outside of Verizon. From health and wellness benefit options including: medical, dental, vision, short and long term disability, basic life insurance, supplemental life insurance, AD&D insurance, identity theft protection, pet insurance and group home & auto insurance. We also offer a matched 401(k) savings plan, up to 8 company paid holidays per year and up to 6 personal days per year, paid parental leave, adoption assistance and tuition assistance, plus other incentives, we’ve got you covered with our award-winning total rewards package. Depending on the role, employees have the opportunity to receive compensation in the form of premium pay such as overtime, shift differential, holiday pay, allowances, etc. Newly hired employees receive up to 15 days of vacation per year, which grows with additional service. For part-timers, your coverage will vary as you may be eligible for some of these benefits depending on your individual circumstances.

The salary will vary depending on your location and confirmed job-related skills and experience. This is an incentive based position with the potential to earn more. For part-time roles, your compensation will be adjusted to reflect your hours.

The annual salary range for the location(s) listed on this job requisition based on a full-time schedule is: $126,000.00 - $242,000.00.