Hybrid Network Security Engineer: Threat Detection & IR

Verizon; Cary (NC); Hybrid; USD 101,000 - 194,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Verizon is seeking a highly skilled Cybersecurity Engineer to join the GN&T Network Security Defense team in a hybrid role. You will own real-time threat monitoring, detection, and incident response across Core, Edge, and Access networks, leveraging Splunk and SOAR to automate triage and responses.

The role emphasizes threat hunting, vulnerability management, and building robust security architectures, including MFA, encryption, IAM, and incident playbooks for scalable deployments.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, or a related field or four or more years of work experience.
• Four or more years of relevant experience required, demonstrated through one or a combination of work and/or military experience, or specialized training.
• Ability to write complex, optimized Splunk SPL searches, including macros, data models, and lookups for efficient threat hunting and investigation.
• Knowledge of incident response lifecycles (NIST or SANS) with experience designing, testing, and maintaining automation playbooks using SOAR platforms to automate triage and response actions.
• Experience with risk-based alerting, managing notable events, asset/identity correlation, and defining/tuning correlation searches.

Responsibilities

• Identifying technology gaps to lead in the design, architecture, and implementation of appropriate security solutions.
• Creating formal guidelines, policies, and procedures to ensure smooth and error-free operations.
• Implementing strategic solutions in a highly scalable environment.
• Partner across the Operations, Engineering, and Planning organizations to ensure secure design patterns are embedded into new deployments and major changes.
• Working independently on strategic technical challenges.
• Identifying opportunities to mentor junior engineers, guide, and delegate technical documentation/tasks to support the team and broader organization.
• Communicating clearly and effectively, articulating complex technical concepts to diverse internal and external audiences.
• Lead network security incident response activities including triage, containment, eradication, and recovery for disruptive threats
• Build and refine incident playbooks and response runbooks, ensuring repeatable workflows for high-impact scenarios (ransomware, phishing, insider threat, DDoS, etc)
• Serve as escalation support for security related investigations, providing expert-level analysis and guidance during active incidents
• Execute root cause analysis and produce clear incident reports outlining timeline, impact, evidence, and remediation recommendations
• Conduct proactive threat hunting across the identity, endpoint, network telemetry to uncover adversary behavior and reduce dwell time
• Create and tune threat detections using SIEM (Security Information and Event Management) to improve alert fidelity and reduce false positives
• Drive continuous improvement of network visibility and telemetry collection to strengthen detection and response capabilities
• Perform regular security control assessments validating configuration effectiveness and closing gaps discovered during incidents or hunts

Skills

Threat hunting

Incident response

SPL searches

Automation scripting

Education

Bachelor's degree in Computer Science or related field

Tools

Splunk

SOAR platforms

Python

Ansible

OpenStack

Kubernetes

Job description

Verizon is seeking a highly skilled Cybersecurity Engineer to join the GN&T Network Security Defense team in a hybrid role. You will own real-time threat monitoring, detection, and incident response across Core, Edge, and Access networks, leveraging Splunk and SOAR to automate triage and responses.

The role emphasizes threat hunting, vulnerability management, and building robust security architectures, including MFA, encryption, IAM, and incident playbooks for scalable deployments.