Principal DFIR Engineer: Network Forensics & IR

verizon; Southlake (TX); Presencial; USD 180.000 - 240.000; Jornada completa

Descripción de la vacante

Verizon is seeking a Principal Engineer for the Security Defense organization to lead DFIR initiatives across core, edge, and access networks. This role involves autonomous incident response leadership, developing advanced forensic capabilities, and guiding cross-functional teams through major security events.

The candidate will own forensic investigations, architect cloud-native DFIR pipelines, and deliver high-impact, timely remediation strategies with executive-level coordination.

Formación

• Bachelor's degree or four or more years of relevant work experience.
• Six or more years of relevant work experience in digital forensics, network security engineering, or incident response.
• Proven track record of operating with complete autonomy and driving complex technical initiatives.
• Deep experience with SIEM platforms (Splunk, ELK).
• Proficiency in forensic acquisition and analysis suites (EnCase, FTK, Volatility, X-Ways).
• Hands-on experience authoring and operationalizing YARA rules for artifact extraction.
• Expert knowledge of core network protocols (TCP/IP, BGP, OSPF, DNS, TLS, HTTP/S) and telemetry formats.
• Proficiency in scripting/automation using Python, PowerShell, or Bash.

Responsabilidades

• Autonomous DFIR leadership across Core, Edge, and virtualized network infrastructure.
• Executive incident command during major security events with cross-functional coordination.
• Network telemetry analysis using PCAP, NetFlow/IPFIX, firewalls, and device logs.
• Developing and maintaining forensic tooling and automation pipelines.
• Creating and refining DFIR playbooks and runbooks for high-impact incidents.
• Producing detailed forensic investigation reports with timelines and remediation recommendations.

Conocimientos

DFIR leadership

Executive incident command

Network security

Scripting & automation

TCP/IP knowledge

Python

PowerShell

Bash

Educación

Bachelor's degree or 4+ years experience

Herramientas

Splunk

ELK

EnCase

FTK

Volatility

X-Ways

SANS SIFT

KAPE

YARA

Descripción del empleo

Verizon is seeking a Principal Engineer for the Security Defense organization to lead DFIR initiatives across core, edge, and access networks. This role involves autonomous incident response leadership, developing advanced forensic capabilities, and guiding cross-functional teams through major security events.

The candidate will own forensic investigations, architect cloud-native DFIR pipelines, and deliver high-impact, timely remediation strategies with executive-level coordination.