When you join Verizon

Verizon is a leading provider of technology, communications, information and entertainment products, transforming the way we connect across the globe. We’re a diverse network of people driven by our ambition and united in our shared purpose to shape a better future. Here, we have the ability to learn and grow at the speed of technology, and the space to create within every role. Together, we are moving the world forward – and you can too. Dream it. Build it. Do it here.

What you’ll be doing...

  • As a Subject Matter Expert you will be leading security engagements, understand technical concepts and provide environment tailored recommendations & requirements to reduce application risk.
  • Hold discussions with application team stakeholders, triage issues, remove false positives and provide technical recommendations.
  • Maintain and troubleshoot security scanning platforms.
  • Evolve and enhance existing security static and dynamic scanning policies and procedures.
  • Identify & Review security impacted user stories.
  • Assist in DevSecOps pipeline integration & automation.
  • Provide information risk advisory services to identify and mitigate IT risks in the Organization.

What we’re looking for...

You’ll need to have:

  • Bachelor’s degree or one or more years of work experience.
  • Experience in analyzing security risk on development of Agile Stories.
  • Knowledge of application development and shell scripting (Bash, Python, Ruby, JavaScript, and/or Perl).
  • Knowledge of commonly used information security concepts, practices and procedures. Well versed with Secure SDLC methodology and concepts.

Even better if you have:

  • A degree.
  • Two or more years of Application Security Experience.
  • Experience with Fortify, OWASP ZAP, CheckMarx, WebInspect or other related tools.
  • Experience in web & mobile application security testing including API and Microservices.
  • Knowledge of Network security concepts, Application security concepts, Cloud Security, Data Protection and/or PCI DSS.
  • Knowledge on threat modeling practices into the Software Development Lifecycle.
  • Experience with cloud concepts like Containers, Kubernetes, Dockers, etc.
  • Knowledge of Splunk, SPL and anomaly detection and visualization development.
  • Good presentation skills, including the capability to develop and deliver technical presentations and tailor content to the audience as appropriate.
  • Ability to visualize/develop KPIs and dashboards.