Engineer 3-Security Engineering

When you join Verizon

You want more out of a career. A place to share your ideas freely — even if they’re daring or different. Where the true you can learn, grow, and thrive. At Verizon, we power and empower how people live, work and play by connecting them to what brings them joy. We do what we love — driving innovation, creativity, and impact in the world. Our V Team is a community of people who anticipate, lead, and believe that listening is where learning begins. In crisis and in celebration, we come together — lifting our communities and building trust in how we show up, everywhere & always. Want in? Join the #VTeamLife.

What you’ll be doing...

The Verizon Cyber Security (VCS) organization securely enables the business by protecting assets and information across Verizon networks, infrastructure and applications. CIS integrates cybersecurity governance, policies, technologies and operations across Verizon, and works to incorporate security into the design of technology systems and services.

We are looking for an experienced security professional who is passionate and knowledgeable about SaaS, Cloud, and Security. This position will be responsible for enforcing security policies, conducting security assessments on 3rd Party SaaS products and Cloud-based services, as well as ensuring secure implementation of these products and services.

As an Engineer III on the SaaS Security team (a specialised pillar of our broader Cloud Security organization), you will be responsible for defining, scaling, and executing security posture and compliance across our expanding enterprise SaaS ecosystem.You should treat assistive AI tools (Gemini, Claude Code, MCP) as core components of your daily workflow to rapidly prototype, write Python scripts, automate manual tasks, and expand our security capabilities. You will act as a technical anchor for our SaaS security initiatives, partnering closely with distributed business application owners and administrators to align security standards with overall business operations.

• SaaS Posture & Integration Management: Owning the daily engineering operations of our SSPM platform (Obsidian Security). Partner closely with distributed application admins to remediate configuration drift, integration risks, and data over-sharing.

• Cross-Functional Partnership: Acting as a trusted technical resource for application owners and business stakeholders. Navigate competing priorities by translating complex technical risks into clear business context, building consensus around security best practices.

• Platform Expansion & Custom Tooling: Designing, building, and deploying custom integrations and Custom Connectors for Obsidian to bring non-standard or bespoke SaaS applications into our security monitoring perimeter.

• AI-Driven Automation: Leveraging "vibe coding" principles, agentic workflows, and assistive AI tools to write Python scripts and automate repetitive security engineering workflows, data parsing, and alert triaging.

• Advanced SaaS Risk Reviews: Conducting deep-dive technical security architecture reviews of third-party SaaS vendors. Analyzing identity flows, API permissions, data boundaries, and encryption mechanisms to determine integration risk.

• App Onboarding & Visibility: Collaborating with business stakeholders and app administrators to onboard new applications into our security stack, ensuring proper permissions are granted for posture, integration, and threat/activity event logging.

What we’re looking for...

You’re great at working in teams and can use your interpersonal skills to get your point across. You are self-driven and motivated, with good communication and analytical skills. You’re a sought-after team member that thrives in a dynamic work environment. You will be working with multiple partners so networking and managing effective working relationships should be your top most priority. You have an understanding of industry trends in all areas of Information Security.

You'll need to have:

• Bachelor’s degree or two or more years of relevant work experience.

• Three or more year of relevant work experience in Security Engineering, Cloud Security, Systems Engineering, or a highly relevant technical domain.

• SSPM Domain Expertise (Highly Preferred): Direct, hands-on experience with SaaS Security Posture Management (SSPM) solutions—ideally Obsidian Security, or similar platforms (e.g., AppOmni, Wing, Adaptive Shield). Alternatively, a proven and demonstrable ability to rapidly master complex, unfamiliar cloud security tooling is required.

• Interpersonal & Communication Skills: Strong verbal and written communication skills, with a track record of building positive cross-functional relationships. Ability to articulate risk clearly, tailor technical messaging for diverse audiences, and drive collaborative solutions.

• The AI-First Skillset: Hands-on experience utilizing generative AI tools (e.g., Gemini, Claude Code, GitHub Copilot) and frameworks (MCP, agentic workflows) to accelerate technical outputs and automate workflows.

• Pragmatic Coding Ability: Strong foundational understanding of Python and REST APIs. You must be able to read, debug, and confidently guide AI to generate code for custom API connectors, scripting, and data manipulation (JSON/YAML).

• SaaS & Cloud Architecture Domain Knowledge: Deep understanding of modern identity and access management (IAM) protocols (SAML, OIDC, OAuth scopes), token management, and SaaS tenant architecture.

• Risk Vetting Persona: Proven ability to analyze a vendor's documentation or architecture diagram and instinctively identify data leakage points, privilege escalations, or supply-chain risks.

• Project Ownership: High degree of professional autonomy. Ability to drive cross-functional initiatives and guide enterprise application administrators to adopt security standards without direct reporting authority.

Even better if you have one or more of the following:

• A Masters degree.

• Certifications: One or more of the following AWS, GCP.

• Experience with tools and technologies used throughout secure SDLC (e.g. Fortify)

• Experience with Linux Containers (Docker), Kubernetes, and deployment of containerized applications/microservices architectures.

• Experience in software development and Writing efficient SQL queries

• Experience in Information Security, Networking or Security Risk Management.

• Experience with ISO 27001-2, NIST 800-53, or other controls standards.

• Excellent documentation and organization skills.

• Ability to multitask, take direction, prioritize, and manage multiple activities / tasks to achieve objectives.

• Excellent oral, written, and interpersonal skills. Ability to present and communicate to both superiors and peers.

If Verizon and this role sound like a fit for you, we encourage you to apply even if you don’t meet every “even better” qualification listed above.

Where you’ll be working

In this hybrid role, you'll have a defined work location that includes work from home and assigned office days set by your manager.

Scheduled Weekly Hours

40

Equal Employment Opportunity

Verizon is an equal opportunity employer. We evaluate qualified applicants without regard to race, gender, disability or any other legally protected characteristics.