Junior Data Security Engineer

Summary

Verizon is a telecommunications and technology company that powers connectivity and digital experiences. The Junior Data Security Engineer will contribute to the Data Services team by building and maintaining MCP server infrastructure, security data pipelines, cloud storage integrations, and analytics data services. The role also involves implementing security remediations, writing secure code, participating in security reviews, and maintaining technical documentation with guidance from senior engineers.

Responsibilities

• Contributing to the team's MCP server - building, maintaining, and extending MCP tools that expose vulnerability data and security datasets to AI agents and internal consumers
• Implementing feature work and bug fixes across data pipeline services under the direction of senior engineers - ingestion improvements, schema changes, and reliability work
• Building and maintaining data transfer pipelines to Google Cloud Storage - moving structured security data reliably between enterprise systems and GCS buckets
• Supporting data sharing integrations for analytics consumers - contributing to the services and exports that make security datasets available to downstream reporting and analytics platforms
• Participating in breaking-change analysis when shared data schemas or MCP tool contracts evolve: understand downstream impact and surface concerns to senior engineers
• Contributing to internal tooling and operator-facing surfaces where data platform capabilities are exposed - learning to think about what the consuming side needs, not just what the service provides
• Contributing to Google Cloud Platform-hosted services and infrastructure work - deploying and maintaining workloads in Google Cloud Platform as the team expands its cloud footprint
• Implementing security remediations identified through assessment, including application-layer vulnerability fixes and security configuration hardening, with senior engineer review
• Applying cloud-native secrets management patterns under guidance: Key Vault integration, Managed Identity, encrypted connections, and JWT validation
• Writing secure code by default - parameterized queries, input validation at system boundaries, least-privilege service accounts
• Participating in white-box security reviews of internal services - beginning to read code with an attacker's eye and learning to identify common application-layer vulnerabilities
• Contributing to documenting findings with specificity: file paths, line numbers, and reproduction steps under the direction of senior team members
• Translating security findings into working code fixes with senior engineer guidance on scope and remediation approach
• Using AI coding assistants as a daily accelerator - for navigating unfamiliar services, drafting code, and applying patterns across a codebase with senior review
• Generating and maintaining technical documentation with AI assistance - service overviews, data flow descriptions, and runbooks that help the next engineer
• Learning to validate generated code against the actual codebase, catch hallucinated APIs, and recognize when a suggestion needs to be overridden rather than shipped

Skills

• You're early in your career but past the very beginning
• You take your work seriously - when you're assigned a service or a task, you dig in, ask smart questions, and see it through
• You don't need someone to manage every step, but you know when to pull in senior eyes before making a call that's above your current context
• You take security hygiene seriously from the start - credential handling, input validation, least-privilege - and you apply those practices consistently, not just when someone's watching
• You're curious about how data moves - not just the pipeline stage you're working on, but where the data came from, where it ends up, and what breaks if your piece gets it wrong
• That end-to-end thinking makes you easier to grow and more useful to the team early on
• You use AI tools the way the rest of this team does: as a real accelerator, not a shortcut
• You're actively building habits around validating the output before it becomes someone else's problem
• Bachelor's degree or one or more years of relevant work experience
• One or more years of software engineering experience
• Working Python or .NET (C#) development skills - comfortable building and maintaining backend services, REST APIs, and data processing logic
• Familiarity with data pipeline concepts - understanding how data moves between systems, basic ETL patterns, and what can go wrong at each stage
• Understanding of common injection vulnerabilities and the importance of input validation and secure credential handling - especially relevant when working with vulnerability datasets
• Exposure to cloud storage or data transfer patterns - GCS, S3, or similar object storage in a project or professional context
• Comfort reading unfamiliar code - you can follow data flow and find where the important logic lives even in codebases you didn't write
• Active or recent use of AI coding tools (Claude Code or similar) - not just awareness, but a genuine attempt to build them into how you work
• Ability to write clear technical documentation that helps another engineer understand what you built and why
• Security+ or equivalent foundational security knowledge, or active pursuit of it
• Awareness of OWASP Top 10 or OWASP API Security Top 10
• Any exposure to SAST tooling or secrets scanning in a CI/CD pipeline
• Hands-on experience with GCS - reading, writing, and managing objects; understanding bucket structure and IAM access patterns
• Familiarity with analytics data sharing patterns - exports to BigQuery, Looker, Google Sheets, or similar platforms
• Basic familiarity with JWT / OAuth 2.0 - understanding how tokens are issued and validated for service-to-service data access
• Any exposure to MCP (Model Context Protocol) - understanding what MCP servers do and how tools are defined and consumed by AI agents
• Hands-on experience with Google Cloud Platform (Google Cloud Platform) - Cloud Run, GCS, Pub/Sub, IAM, or related services
• Any experience with Azure DevOps, GitLab, or similar CI/CD tooling
• Familiarity with database patterns - query design, connection management, or migration tooling (EF Core or similar)
• Some exposure to TypeScript or a JavaScript frontend framework (React, Angular, or similar)
• Demonstrated genuine use of AI coding tools - can speak to what you've tried, where it helped, and where you learned it needed checking

Qualifications

Must Haves

• You're early in your career but past the very beginning
• You take your work seriously - when you're assigned a service or a task, you dig in, ask smart questions, and see it through
• You don't need someone to manage every step, but you know when to pull in senior eyes before making a call that's above your current context
• You take security hygiene seriously from the start - credential handling, input validation, least-privilege - and you apply those practices consistently, not just when someone's watching
• You're curious about how data moves - not just the pipeline stage you're working on, but where the data came from, where it ends up, and what breaks if your piece gets it wrong
• That end-to-end thinking makes you easier to grow and more useful to the team early on
• You use AI tools the way the rest of this team does: as a real accelerator, not a shortcut
• You're actively building habits around validating the output before it becomes someone else's problem
• Bachelor's degree or one or more years of relevant work experience
• One or more years of software engineering experience
• Working Python or .NET (C#) development skills - comfortable building and maintaining backend services, REST APIs, and data processing logic
• Familiarity with data pipeline concepts - understanding how data moves between systems, basic ETL patterns, and what can go wrong at each stage
• Understanding of common injection vulnerabilities and the importance of input validation and secure credential handling - especially relevant when working with vulnerability datasets
• Exposure to cloud storage or data transfer patterns - GCS, S3, or similar object storage in a project or professional context
• Comfort reading unfamiliar code - you can follow data flow and find where the important logic lives even in codebases you didn't write
• Active or recent use of AI coding tools (Claude Code or similar) - not just awareness, but a genuine attempt to build them into how you work
• Ability to write clear technical documentation that helps another engineer understand what you built and why

Nice to Haves

• Security+ or equivalent foundational security knowledge, or active pursuit of it
• Awareness of OWASP Top 10 or OWASP API Security Top 10
• Any exposure to SAST tooling or secrets scanning in a CI/CD pipeline
• Hands-on experience with GCS - reading, writing, and managing objects; understanding bucket structure and IAM access patterns
• Familiarity with analytics data sharing patterns - exports to BigQuery, Looker, Google Sheets, or similar platforms
• Basic familiarity with JWT / OAuth 2.0 - understanding how tokens are issued and validated for service-to-service data access
• Any exposure to MCP (Model Context Protocol) - understanding what MCP servers do and how tools are defined and consumed by AI agents
• Hands-on experience with Google Cloud Platform (Google Cloud Platform) - Cloud Run, GCS, Pub/Sub, IAM, or related services
• Any experience with Azure DevOps, GitLab, or similar CI/CD tooling
• Familiarity with database patterns - query design, connection management, or migration tooling (EF Core or similar)
• Some exposure to TypeScript or a JavaScript frontend framework (React, Angular, or similar)
• Demonstrated genuine use of AI coding tools - can speak to what you've tried, where it helped, and where you learned it needed checking

Benefits

• Medical, dental, and vision benefits
• Short- and long-term disability insurance
• Basic life insurance
• Supplemental life insurance
• AD&D insurance
• Identity theft protection
• Pet insurance
• Group home and auto insurance
• Matched 401(k) savings plan
• Up to 8 company-paid holidays per year
• Up to 6 personal days per year
• Paid parental leave
• Adoption assistance
• Tuition assistance
• Other incentives
• Depending on the role, premium pay such as overtime, shift differential, holiday pay, and allowances
• Newly hired employees receive up to 15 days of vacation per year, which grows with additional service
• In this remote role, you'll work from home with occasional in-person trainings and meetings