Principal Engineer – Network Forensics, Incident Response

Verizon

. Lead network digital forensics and incident response across Verizon’s Network Security Defense portfolio .

Posted 10/14/2026full-timeUnited StatesLead💰 $120,500 - $231,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in digital forensics and incident response, with a strong focus on network security engineering and the ability to lead complex technical initiatives autonomously. Proficient in developing forensic strategies, analyzing network data, and communicating findings effectively to diverse audiences.

Highest-signal resume keywords

Digital ForensicsIncident ResponseYARA Rule AuthoringSIEM/Data AnalysisTCP/IP Protocols

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Digital ForensicsIncident ResponseYARA Rule AuthoringSIEM/Data AnalysisTCP/IPBGPOSPFPythonPowerShellBash

Soft Skills

Effective CommunicationLeadershipMentoringInterpersonal SkillsAbility to Summarize Complex Findings

Tools & Technologies

SplunkELKEnCaseFTKVolatilityX-WaysSANS SIFTKAPEKubernetesOpenStack

Certifications & Qualifications

GNFAGCFAGCIHCCE

Industry Keywords

Network SecurityForensic CollectionAdvanced Persistent ThreatsMITRE ATT&CK4G/5G Wireless Networks

Tech Stack

Tools & technologies

CloudDNSKubernetesOpenStackPythonSplunkTCP/IP

About the role

Key responsibilities & impact

Lead network digital forensics and incident response across Verizon’s Network Security Defense portfolio
Drive enterprise-wide forensic collection strategies and incident response programs across Core, Edge, and virtualized network infrastructure
Serve as chief technical incident commander during major security events
Orchestrate cross-functional response, executive communications, containment, and remediation
Analyze PCAP, NetFlow/IPFIX, firewall logs, and router/switch artifacts
Architect and maintain YARA rules and conduct forensic analysis of memory, endpoints, custom appliances, and network equipment
Investigate advanced persistent threats, extract IOCs, and convert findings into detections
Architect automated, cloud-native forensic collection pipelines, triage engines, and orchestration tooling
Develop and refine DFIR playbooks and runbooks for major incidents
Produce forensic investigation reports covering attack timelines, root cause, evidence, impact, and remediation recommendations
Partner across the Defense organization to mature Verizon’s security posture

Requirements

What you’ll need

Bachelor’s degree or four or more years of relevant work experience
Six or more years of relevant work experience in digital forensics, network security engineering, or incident response, demonstrated through work and/or military experience or specialized training
Proven track record of operating with complete autonomy, driving complex technical initiatives, and major incident command with zero supervision
Deep experience with SIEM/data analysis platforms such as Splunk and ELK
Strong proficiency in EnCase, FTK, Volatility, X-Ways, SANS SIFT, and KAPE
Hands-on experience authoring and operationalizing YARA/YARA-L rules
Expert knowledge of TCP/IP, BGP, OSPF, DNS, TLS, HTTP/S, NetFlow, IPFIX, and syslog
Proficiency in Python, PowerShell, or Bash
Industry-recognized DFIR certifications such as GNFA, GCFA, GCIH, or CCE are advantageous
Experience with 4G/5G wireless network functions, carrier-grade IP networks, or Kubernetes, OpenStack, and KVM is advantageous
Knowledge of the MITRE ATT&CK framework and enterprise threat intelligence integration
Effective written, interpersonal, and verbal communication skills
Ability to summarize complex forensic findings for technical and non-technical audiences
Ability to work with technical engineering teams, business owners, and executives
Strong leadership and mentoring abilities
Proven ability to manage and deliver results under high-pressure security incident scenarios

Benefits

Comp & perks

Medical, dental, and vision benefits
Short- and long-term disability insurance
Basic and supplemental life insurance
AD&D insurance
Identity theft protection
Pet insurance
Group home & auto insurance
Matched 401(k) savings plan
Up to 8 company paid holidays per year
Up to 6 personal days per year
Paid parental leave
Adoption assistance
Tuition assistance
Other incentives
Premium pay such as overtime, shift differential, holiday pay, and allowances, depending on the role
Up to 15 days of vacation per year for newly hired employees, growing with additional service
Hybrid work arrangement with working from home and a minimum of three days per week in the office