Security Engineer

Verizon is a telecommunications company that connects people and enables how they live, work, and play. The Security Engineer will support the Dynamic Application Security Testing team by automating security testing, integrating tools into CI/CD pipelines, and identifying and remediating application vulnerabilities. The role also supports ethical hacking, bug bounty triage, and critical incident response across web applications, mobile applications, and APIs.

Responsibilities:

• Integrating dynamic analysis tools (OWASP ZAP, Burp Suite) directly into Jenkins and GitLab CI/CD pipelines to ensure continuous security testing
• Writing and maintaining custom automation scripts using Python, Java, and Bash to scale our security efforts and eliminate manual bottlenecks
• Utilizing AI to build new testing capabilities, streamline the triage of bug bounty submissions, and troubleshoot code across our tech stack
• Deploying, hosting, and maintaining containerized security testing environments using Docker and AWS
• Partnering with engineering teams to guide them through identifying and remediating OWASP Top 10 vulnerabilities
• Leveraging your offensive expertise to triage incoming bug bounty submissions and support Verizon’s critical incident response efforts
• Performing ethical hacking and penetration testing against web applications, mobile apps, and APIs to uncover vulnerabilities before malicious actors do

Requirements:

• Bachelor's degree or one or more years of work experience
• 2+ years of hands-on experience in Application Security, Penetration Testing, or a DevSecOps engineering role
• Deep understanding of web application architecture, APIs (REST/GraphQL), and mobile application security
• Comprehensive knowledge of the OWASP Top 10, CWEs, CVSS scoring, and how to manually validate and exploit these vulnerabilities
• Proficiency operating and configuring industry-standard dynamic analysis tools, specifically Burp Suite Professional and OWASP ZAP
• Proven experience integrating security tools into modern CI/CD pipelines using Jenkins and GitLab CI
• Strong ability to read, write, and maintain automation scripts in Python and Bash
• Hands-on experience working with Docker containers and deploying/managing applications in AWS (experience with EC2s/Linux is a plus)
• Ability to clearly explain complex security vulnerabilities (and why remediating them is important) to software engineers who may not have a security background
• Experience using AI assistants (ideally Gemini or Claude Code) for scripting, debugging code, or day to day productivity improvements