Principal Engineer Infrastructure & Cloud Security

About This Role

This role involves leading day-to-day operations and continuously improving processes within Infrastructure & Cloud Security Governance for Verizon's Global Service Enterprise Network. The Principal Engineer will partner with various stakeholders to mitigate cyber risks and defend against emerging threats, focusing on proactive security measures and digital transformation.

Responsibilities

• Lead the day-to-day operations, engaging internal and external stakeholders
• Automate and continuously improve processes by evaluating and implementing automation tools
• Design Infrastructure and Cloud Security Governance reporting dashboards, scorecards, and maturity models
• Support the design of VGS On-Prem Infrastructure, Data centers, and Cloud environments, aligning with zero trust principles
• Collaborate with stakeholders to identify gaps and process improvements to enhance security protections
• Assist with the transformation of the zero trust framework for VGST's Network, Infrastructure, and Cloud Governance models
• Foster strategic partnerships with industry leaders to evaluate and adopt best-in-class security solutions
• Provide security awareness, training, and compliance programs focused on Network Cybersecurity practices
• Partner with Verizon Cybersecurity teams, participating in Active Defense, Incident Response, Penetration Testing, Red Team, Threat Hunt campaigns, and Tabletop Exercises
• Review outcomes of root cause analysis, compliance audits, and lessons learned to establish sustainable processes
• Support internal and external audit reviews, producing and presenting artifacts and executive summaries
• Populate enterprise-level KPIs and analyze operational metrics to identify patterns or trends
• Produce executive-level operational read-outs, metrics, and project statuses
• Execute long-term and short-term strategic goals, ensuring proper updates and cross-functional collaboration
• Motivate, mentor, and advise network & infrastructure analysts and engineers on skill building and quality work products

Requirements

• Bachelor’s degree or four or more years of work experience.
• Six or more years of relevant experience
• Three or more years of experience in Information Security, Network Technology or Technical Risk Analysis
• Three or more years of experience with scripting and programming for automation of data parsing, API interactions, and custom tool development.

Qualifications

• Bachelor’s degree or four or more years of work experience
• 6+ years of relevant experience, with 3+ years in Information Security, Network Technology, or Technical Risk Analysis, and 3+ years in scripting and programming for automation

Nice to Have

• Knowledge and experience in analyzing large datasets (e.g., netflow, firewall, DNS, Proxy, VPN logs)
• Experience with data analytical tools such as Splunk, Elasticsearch, or Hadoop
• Experience in creating, modifying, and executing Ansible playbooks for automation, configuration management, and orchestration of security deployments
• Understanding on how to develop and configure dashboards and visualizations with tools like Grafana
• Comprehensive understanding of cybersecurity, network defense, and investigative frameworks (e.g., NIST CSF, ISO 27000 series, MITRE ATT&CK, Lockheed Martin Cyber Kill Chain)
• High-level understanding of Cloud Environments (AWS, Azure, OCI) and Operating Systems (Windows, Unix/Linux, and OSX)
• Certifications like: CCNA, Network+, Security+, CISSP

Skills

* Required skills

Benefits