Security Engineer-III

When you join Verizon

You want more out of a career. A place to share your ideas freely — even if they’re daring or different. Where the true you can learn, grow, and thrive. At Verizon, we power and empower how people live, work and play by connecting them to what brings them joy. We do what we love — driving innovation, creativity, and impact in the world. Our V Team is a community of people who anticipate, lead, and believe that listening is where learning begins. In crisis and in celebration, we come together — lifting our communities and building trust in how we show up, everywhere & always. Want in? Join the V Team Life.

What you’ll be doing...

The Verizon Product Security Team ensures security by design product engineering and architecture for consumer products. As an Engineer III, you will work to develop security control based on the KPI on Consumer products and solutions. You will help to create, define, and implement security controls and tooling in conjunction with product development teams and product owners. You will manage multiple projects with a degree of impact and complexity that must be carefully controlled to support the internal business unit security requirements.

You will also work in conjunction with security stakeholders in other areas of the business and make decisions and help lead initiatives to ensure timely delivery of security solutions that support business objectives. You will also manage work that involves coordination with multiple organizations and is the focal point within the group.

• Helping implement Secure Software Development Lifecycle (SSDLC) practices and use automation where possible
• Working with the product development teams to perform security design/code reviews and vulnerability assessment.
• Providing security guidance to Engineering and Product teams.
• Contributing to security architecture and assist in building and rolling out processes for secure code development and deployment involving truly cutting-edge technology
• Providing subject matter expertise on encryption, security controls, and secure design and programming practices across the Technology organization
• Contributing to security policy, standards, and guidelines related to Information Security
• Evaluating and operationalize new technologies for securing the organization
• Training and mentoring Security Champions throughout the development
• Sharing thought leadership in the product and application security space
• Creating security user stories and security test cases for products that are tailored to the product attributes and technology
• Supporting and advise product owner and product development teams by ensuring technical and architectural feasibility, readiness and compliance.
• Experiencing with secure SDLC, governance and compliance for PCI and NIST
• Understanding industry trends in all areas of Information Security

Where you'll be working...

In this hybrid role, you'll have a defined work location that includes work from home and assigned office days set by your manager.

What we’re looking for...

You are excited to work in complex, mission-critical, high transaction, high availability environments. You’re great at working in teams and can use your interpersonal skills to get your point across. You are self-driven and motivated, with good communication and analytical skills. You’re a sought-after team member that thrives in a dynamic work environment. You will be working with multiple partners so networking and managing effective working relationships should be your top most priority. You have an understanding of industry trends in all areas of Information Security.

You'll need to have:

• Bachelor’s degree or four or more years of work experience.
• Four or more years of relevant work experience.
• Experience with one of the following security disciplines:
• Application Security: Experience with building security for Web Clients and Services with a focus on security aspects of application and operating system platforms
• Experience with application programming (Java/JavaScript or any other languages) and the overall software development life cycle.
• Cloud Security: Experience with AWS services such as EC2, S3, Lambda, ELB, VPC, CloudFormation, Security Groups, and AWS Organizations. Applying security for Cloud Architecture with various orchestration (Mesos, Docker Swarm, K8)

Even better if you have:

• Knowledge of application security vulnerabilities, secure coding, attack surfaces and countermeasures.
• Knowledge of S-SDLC, best practices for secure coding, understanding of OWASP Top 10, CIS Top 20
• Understanding of Docker, Kubernetes, container security best practices.
• Experience with Threat Management and Monitoring tools (like CrowdSrike, GuardDuty, Tenable, CloudTrail, Cloudwatch) and container security tools.

If Verizon and this role sound like a fit for you, we encourage you to apply even if you don’t meet every “even better” qualification listed above.

Where you’ll be working

Scheduled Weekly Hours

Diversity and Inclusion

We’re proud to be an equal opportunity employer. At Verizon, we know that diversity makes us stronger. We are committed to a collaborative, inclusive environment that encourages authenticity and fosters a sense of belonging. We strive for everyone to feel valued, connected, and empowered to reach their potential and contribute their best. Check out our diversity and inclusion page to learn more.