Senior Network Forensics & IR Engineer

Verizon; Cary (NC); Hybrid; USD 101,000 - 194,000; Full time

Job summary

Verizon is seeking a Senior Engineer to lead digital forensics and incident response across its Defense portfolio. You will drive investigations, coordinate with Security Defense, and improve visibility and forensic readiness across networks and cloud environments.

The role requires strong scripting, DFIR tooling, and deep network protocol knowledge. You will work in a hybrid model with in-office collaboration and remote work options, reporting to the N&T Network Security team.

Qualifications

• Bachelor's degree or 4+ years of relevant work experience.
• 4+ years in digital forensics, network security engineering, or incident response.
• Deep experience with SIEM/data analysis platforms (Splunk, ELK).
• Strong proficiency in forensic acquisition and analysis suites (EnCase, FTK, Volatility, X-Ways, SANS SIFT, KAPE).
• Expert knowledge of core network protocols (TCP/IP, BGP, OSPF, DNS, TLS, HTTP/S) and network telemetry formats.

Responsibilities

• Lead DFIR investigations during major security incidents.
• Drive incident response efforts and containment.
• Analyze PCAP, NetFlow/IPFIX, logs, and artifacts for adversary activity.
• Analyze memory dumps and compromised systems for malware artifacts and persistence.
• Author and maintain YARA rules for memory analysis and file carving.
• Develop DFIR playbooks and runbooks for high-impact incidents.
• Prepare executive forensic reports with timelines and remediation recommendations.

Skills

Digital forensics

Network security engineering

Incident response

Scripting/automation

Threat intelligence

Education

Bachelor's degree or 4+ years experience

Tools

Splunk/ELK

EnCase

FTK

Volatility

X-Ways

SANS SIFT

KAPE

Job description

Verizon is seeking a Senior Engineer to lead digital forensics and incident response across its Defense portfolio. You will drive investigations, coordinate with Security Defense, and improve visibility and forensic readiness across networks and cloud environments.

The role requires strong scripting, DFIR tooling, and deep network protocol knowledge. You will work in a hybrid model with in-office collaboration and remote work options, reporting to the N&T Network Security team.