Senior Network Forensics & Incident Response Engineer

verizon; Southlake (TX); On-site; USD 140,000 - 190,000; Full time

Job summary

Verizon is seeking a Senior Engineer to join the Security Defense organization, focusing on DFIR across Core, Edge, and Access networks. You will lead investigations, perform memory and endpoint forensics, and develop DFIR playbooks and detections for high-impact incidents.

The role requires 4+ years in forensics/security with SIEM tools and advanced scripting, and can be located at any US Verizon hub location.

Qualifications

• Bachelor's degree or four+ years of relevant work experience.
• Four+ years in digital forensics, network security engineering, or incident response.
• Deep experience with SIEM/data analysis platforms (Splunk, ELK).
• Proficiency in forensic acquisition/analysis suites (EnCase, FTK, Volatility, X-Ways, SANS SIFT, KAPE).
• Expert knowledge of core network protocols and network telemetry formats (NetFlow, IPFIX, syslog).

Responsibilities

• Network & Digital Forensics: collect, preserve, analyze forensic evidence across diverse infrastructure.
• Incident Response Leadership: act as technical lead during major security incidents.
• Network Telemetry Analysis: examine PCAP, NetFlow/IPFIX, logs to trace adversary moves.
• Memory & Endpoint Forensics: analyze memory dumps and system state during intrusions.
• YARA & Signature Engineering: create rules for memory/file analysis and detection.
• Threat Hunting & Evidence Extraction: identify IOCs and translate findings into detections.
• Automation & Forensic Tooling: script artifact collection and triage workflows.
• Playbooks & Process Maturity: develop DFIR playbooks for high-impact incidents.
• Executive Reporting: deliver forensic reports with timelines, root cause, remediation.

Skills

Forensic analysis

Incident response

Network security

Tech leadership

Education

Bachelor's degree

Tools

Splunk

ELK

EnCase

FTK

Volatility

X-Ways

SANS SIFT

KAPE

Job description

Verizon is seeking a Senior Engineer to join the Security Defense organization, focusing on DFIR across Core, Edge, and Access networks. You will lead investigations, perform memory and endpoint forensics, and develop DFIR playbooks and detections for high-impact incidents.

The role requires 4+ years in forensics/security with SIEM tools and advanced scripting, and can be located at any US Verizon hub location.