Distinguished Engineer, Attack Path and Exposure Analysis

You want more out of a career. A place to share your ideas freely - even if they're daring or different. Where the true you can learn, grow, and thrive. At Verizon, we power and empower how people live, work and play by connecting them to what brings them joy. We do what we love - driving innovation, creativity, and impact in the world. Our V Team is a community of people who anticipate, lead, and believe that listening is where learning begins. In crisis and in celebration, we come together - lifting our communities and building trust in how we show up, everywhere & always. Want in? Join the V Team Life.

We are seeking a highly skilled and experienced Senior Security Risk Management Engineer specializing in Attack Path and Exposure Analysis. The successful candidate will play a crucial role in identifying, analyzing, and mitigating security risks by understanding the potential attack paths and exposure points within our systems and infrastructure. This role is ideal for someone who thrives in a dynamic environment and is passionate about proactively protecting enterprise assets from emerging threats

Responsibilities include:

• Identifying and mapping out potential attack paths within the organization's infrastructure utilizing tools and methodologies to simulate attack scenarios and understand the sequence of compromises an attacker might follow. Along with developing strategies to block or mitigate these paths to minimize the attack surface.

• Conducting thorough exposure assessments to identify vulnerabilities and weaknesses within systems and evaluate the effectiveness of current security controls and recommend enhancements.

• Performing comprehensive risk assessments to identify, prioritize, and address security risks while collaborating with cross-functional teams to implement risk mitigation strategies.

• Providing insights during security incidents by analyzing the attack paths and exposures that were exploited and assist in the investigation and forensic analysis of security incidents.

• Working closely with IT, DevOps, Cyber Security, and application development teams to integrate security practices into their workflows.

• Communicating complex security concepts to non-technical stakeholders.

• Conducting training sessions and workshops to enhance the security awareness of employees.

• Bachelor's degree or four or more years of work experience.

• Six or more years of relevant work experience.

• Six or more years of experience in information security, with a focus on risk management, attack path analysis, and exposure assessments.

• Proven track record in conducting security assessments and implementing security controls in large-scale environments.

• Proficiency in security tools and technologies such as SIEM, vulnerability scanners, penetration testing tools, and exposure management platforms.

• Strong understanding of network security, system security, application security, and cloud security.

• Knowledge of security frameworks and standards such as NIST, ISO 27001, CIS Controls, and MITRE ATT&CK.

• Relevant certifications such as CISSP, CISM, CEH, or GIAC are highly desirable.

If Verizon and this role sound like a fit for you, we encourage you to apply even if you don't meet every "even better" qualification listed above.

.

We're proud to be an equal opportunity employer - and celebrate our employees' differences, including race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, and Veteran status. At Verizon, we know that diversity makes us stronger. We are committed to a collaborative, inclusive environment that encourages authenticity and fosters a sense of belonging. We strive for everyone to feel valued, connected, and empowered to reach their potential and contribute their best. Check out our diversity and inclusion page to learn more.