Principal-Security Engrg

Role overview

Principal-Security Engrg at Verizon

If Verizon and this role sound like a fit for you, we encourage you to apply even if you don’t meet every “even better” qualification listed above.

Responsibilities

• You will prioritize strategy over tooling, emulating adversary Tactics, Techniques, and Procedures (TTPs) to test our Threat Management Center's (TMC) detection pipelines.
• Lead Adversary Simulations: Design and execute complex, objective-based Red Team campaigns modeled on real-world adversaries targeting the telecom industry, utilizing the MITRE ATT&CK framework.
• Drive True Purple Teaming: Embrace a Gray/White-box methodology by walking alongside product and development teams.
• Lead post-campaign replay exercises with the Blue Team and developers to build robust detection rules and secure coding practices.
• Manage Attack Infrastructure as Code: Design, deploy, and maintain dedicated, external cloud attack infrastructure (AWS/GCP) off-network using automated CI/CD pipelines to accurately mirror sophisticated threat actors.
• You’ll need to have:

Employment details

• In this hybrid role, you'll have a defined work location that includes work from home and assigned office days set by your manager.
• Location: Hyderabad [India], Chennai [India]

About the employer

• When you join Verizon
• The Verizon Cyber Security Team is looking for a Principal Security Engineer to lead our Red Team and Adversary Simulation capability within Technology Product Development (TPD).
• We do not exist merely to find missing patches; we act as a catalyst to ensure Verizon is resilient against the threats of tomorrow.

Additional role details

• You want more out of a career.
• A place to share your ideas freely — even if they’re daring or different.
• Where the true you can learn, grow, and thrive.
• At Verizon, we power and empower how people live, work and play by connecting them to what brings them joy.
• We do what we love — driving innovation, creativity, and impact in the world.
• Our V Team is a community of people who anticipate, lead, and believe that listening is where learning begins.
• In crisis and in celebration, we come together — lifting our communities and building trust in how we show up, everywhere & always.
• Want in?
• Join the #VTeamLife.
• What you’ll be doing...
• In this role, you will evolve our offensive security posture beyond standard vulnerability discovery.
• Your mission is to rigorously test and elevate our organization's People, Processes, and Technology against realistic, advanced threats.
• This team rejects the notion that Red Teaming is defined by a checklist of scanners.
• We are looking for a true builder-hacker hybrid—someone who natively speaks the language of modern software engineering and treats offensive operations as an engineering discipline.
• You will operate as a true partner, culminating every campaign with collaborative Purple Team exercises to empower developers to build secure, resilient products from the ground up.
• Target Modern Architectures & AI Ecosystems: Focus attacks on the modern software supply chain, full-stack applications (Node, Angular, Java), and cloud environments.
• Spearhead offensive engagements against AI-driven applications, including testing Model Context Protocol (MCP) integrations, custom LLM agents, and human-in-the-loop (HITL) validations.
• AI-Augmented Offensive Operations: Actively leverage generative AI and modern tooling to accelerate vulnerability research, automate custom payload generation, and scale red team workflows.
• Test Detection and Response: Operate with stealth and precision to evaluate Verizon's logging, alerting, and incident response pipelines in real-time, focusing on "Living off the Land" methodologies.
• Enforce Uncompromising RoE: Establish explicit Rules of Engagement, ensure comprehensive asset inventories, and maintain strict operational safety and legal compliance during all engagements.
• Mentorship & Leadership: Provide expert guidance and technical mentorship to junior Red Team operators and penetration testers.
• What we’re looking for...
• Bachelor’s degree with six or more years of extensive work experience in a relevant security field.
• Six or more years of dedicated, hands-on experience in Red Teaming, adversary simulation, or advanced offensive security.
• Should have one of these core offensive security certifications: OSCP, CRTO, CRTP, or GXPN.
• A deep, practical understanding of the MITRE ATT&CK framework, Threat Intelligence integration, and APT emulation, including bypassing modern EDR/XDR solutions.
• Practical development experience with enterprise tech stacks (specifically Node.js, Angular, and Java) to conduct deep white-box source code reviews, exploit complex web applications, and build bespoke attack tooling.
• Applied knowledge of AI security risks and usage , including prompt engineering, LLM jailbreaking, manipulating AI agent frameworks/APIs (e.g., MCP), and using AI models to accelerate offensive workflows.
• Expertise in configuring, safely utilizing, and modifying Command and Control (C2) frameworks (e.g., Cobalt Strike, Mythic, Sliver).
• Demonstrated experience in collaborative Purple Teaming, translating highly technical attack narratives into actionable detection engineering rules and remediation strategies.
• Even better if you have one or more of the following:
• In-depth knowledge of securing and attacking cloud-native architectures, containerization platforms (Docker, Kubernetes), and modern CI/CD pipelines.
• Highly recognized advanced certifications such as OSEP, OSWE, OSED, or advanced cloud security architecture certifications.
• Mastery of programming and scripting languages (such as C#, C++, Go, Rust, Python, Bash, or PowerShell) to develop bespoke implants, droppers, and evasive tooling on the fly.
• A strong understanding of continuous attack surface management methodologies and advanced OSINT collection.
• Familiarity with the specific threat landscape and operational footprint of the telecommunications industry.
• Exceptional executive communication skills, with the ability to translate technical adversary simulation findings into strategic business risks for senior leadership and legal counsel.
• Where you’ll be working
• Scheduled Weekly Hours
• 40
• Verizon is an equal opportunity employer.
• We evaluate qualified applicants without regard to race, gender, disability or any other legally protected characteristics.