13 days ago
Responsibilities
- Design, implement, and mature controls for Secure Development Lifecycle, software security, cloud security, vulnerability management, and privacy initiatives.
- Assess cybersecurity risk across software, cloud, infrastructure, vulnerability management, and privacy programs and provide actionable remediation guidance.
- Provide secure architecture consultation and design guidance for applications, services, platforms, and enterprise technology initiatives.
- Partner with engineering, DevOps, and platform teams to embed security into development pipelines, cloud services, Infrastructure as Code, and internal development practices.
- Perform secure code reviews, application security assessments, threat-focused reviews, and third-party software evaluations.
- Develop automation, reporting, KPIs, and data-driven workflows to improve security visibility, control adoption, vulnerability remediation, and risk reduction.
- Analyze security telemetry, scan results, and large data sets to identify trends, anomalies, recurring issues, and remediation opportunities.
- Communicate cybersecurity risks, findings, and program status to technical teams, leadership, and non-technical stakeholders.
- Mentor team members and drive cybersecurity initiatives to completion while balancing business priorities, timelines, costs, and operational impact.
Requirements
- At least 8 years of cybersecurity engineering, application security, cloud security, vulnerability management, or secure development experience is listed in the qualifications; the posting also specifies 7–10 years of relevant work experience.
- Bachelor’s degree or higher is desired, with consideration for equivalent coursework and extensive related professional experience.
- Strong understanding of Secure Development Lifecycle practices, secure code review, threat modeling, application security testing, and risk-based remediation.
- Hands-on experience with vulnerability management, patch management, CVE analysis, impact assessment, prioritization, and remediation tracking.
- Experience securing cloud and DevOps environments using AWS services, Infrastructure as Code, Terraform, Ansible, containers, Docker, and Kubernetes.
- Programming or automation experience with Python and SQL for security analytics, reporting, workflow automation, or data-driven risk management.
- Experience with Foundational AI Models or AI-enabled approaches to cybersecurity challenges and security workflow improvement.
- Working knowledge of Linux, Windows, network protocols, access controls, firewalls, ACLs, endpoint protection, cryptography, IAM, and secure authentication concepts.
- Experience supporting enterprise-scale environments, high-availability architectures, resilient systems, and cross-functional security programs.
- Strong analytical, communication, critical-thinking, technical-judgment, and problem-solving skills; cybersecurity certifications are a plus.
Benefits
- Comcast provides benefits and personalized support tools for eligible employees, including physical, financial, and emotional support resources.
- Most non-sales positions are eligible for a bonus under applicable plans.
- Comcast generally prefers on-site collaboration unless the team is designated as virtual; roles with virtual offerings may consider candidates living more than 100 miles from the office for remote work.
About Comcast
Welcome to Comcast. From the connectivity and platforms we provide to the content and experiences we create, we bring people together, globally. Our people think the world of our work, and that’s why our work is the best in the world.