14 days ago
Philadelphia, PA, USASenior / Staff+
H1B sponsor
Responsibilities
- Design, develop, and maintain internal platforms and services for CSOC operations, threat hunting, incident response, PSIRT, product security, risk prioritization, and analyst automation.
- Automate alert triage, investigation enrichment, evidence collection, case management, ticketing, notifications, reporting, and operational handoffs.
- Develop LLM-powered agents and AI-assisted workflows for summarizing security events, enriching investigations, automating triage, and surfacing analyst context.
- Build integrations across security telemetry, SIEM, SOAR, ticketing, source control, scanning, cloud, endpoint, and notification systems.
- Process and correlate large volumes of security data, including alerts, incidents, assets, dependency graphs, repositories, detections, and operational metadata.
- Partner with threat hunters and incident responders to build durable detection, enrichment, and automation capabilities.
- Build PSIRT and product security workflows for intake, triage, prioritization, remediation tracking, and executive reporting.
- Design secure, observable, maintainable, and reliable services for security-sensitive production environments.
- Write tested code, participate in code reviews, and follow engineering best practices.
Requirements
- Bachelor’s degree preferred, with consideration for coursework and experience or extensive related professional experience.
- 5–7 years of relevant work experience.
- Strong software engineering foundation in data structures, system design, large-scale data processing, distributed systems, automation workflows, and front-end and back-end technologies.
- Familiarity with SIEM, SOAR, EDR, case management, security data lakes, or security operations platforms.
- Familiarity with Databricks, Snowflake, Spark, or similar large-scale data processing platforms.
- Experience with cloud platforms such as AWS, GCP, or Azure.
- Experience building analyst-facing tools, dashboards, automation frameworks, or internal platforms.
- Familiarity with OpenAI SDK, LangChain, LangGraph, agentic workflows, retrieval-augmented generation, or AI-assisted security operations.
- Familiarity with OWASP Top 10, secure coding, software supply chain security, dependency risk, or application security concepts.
- Experience translating manual security workflows into scalable software, automation, or data products.
Benefits
- Comcast provides benefits and personalized support intended to address employees’ physical, financial, and emotional needs.
- The role is generally expected to be on-site unless the team is designated virtual; remote consideration may be available for candidates living more than 100 miles from an office when virtual offerings are listed.
- Non-sales positions may be eligible for a bonus in addition to base pay and benefits.
Tech Stack
Categories
About Comcast
Welcome to Comcast. From the connectivity and platforms we provide to the content and experiences we create, we bring people together, globally. Our people think the world of our work, and that’s why our work is the best in the world.