Security Engineer

Comcast brings together the best in media and technology. We drive innovation to create the worlds best entertainment and online experiences. As a Fortune 50 leader, we set the pace in a variety of innovative and fascinating businesses and create career opportunities across a wide range of locations and disciplines. We are at the forefront of change and move at an amazing pace, thanks to our remarkable people, who bring cutting-edge products and services to life for millions of customers every day. If you share in our passion for teamwork, our vision to revolutionize industries and our goal to lead the future in media and technology, we want you to fast-forward your career at Comcast.Job SummaryResponsible for working with the Comcast Business organization to protect products and applications from design and implementation to operation. Responsible for implementing best practices in system and software development via a dev-sec-ops approach. Play a lead role in managing vulnerabilities across the ecosystem, including remediation expertise and tracking. Act as a Security Subject Matter Expert for the engineering, product management, and operations teams. Support the development of new products and offerings by driving security requirements and architecture into the solution. Support new Comcast Business acquisitions in post M&A security integration programs. Integrate knowledge of business and functional priorities into security workstreams. Act as a key contributor in a complex and crucial environment.Job Description

• Recommend and ensure implementation of security requirements and associated controls to the Comcast Business products and applications. Security controls should be in accordance with industry standards, generally accepted business practices and Company security standards. Knowledge of NIST and ISO standards is important.
• Collaborate with the security engineering and system architecture teams to define and maintain a robust security architecture for each product.
• Work with the security operations team to ensure vulnerabilities are properly managed, including meeting internal SLAs.
• Work with the applications development teams to enforce best practices such as the OWASP Top 10 and NIST 800 series guidelines.
• Research new and/or updated security technologies as they become available that can be applied to our supported environments.
• Participate in regular penetration testing, threat modeling, and third party security assurance activities.
• Support security audit (internal and external) activities.
• Help ensure that customer SLAs are met at all times. Responds quickly to downtime situations.
• Communicate regularly with development and support teams regarding security posture and associated development and remediation schedules. Provide insight and resolutions on security matters, acting as a Subject Matter Expert on cross-functional projects across all aspects of the development lifecycle.
• Drive security deliverables as part of M&A post-acquisition security integration programs.
• Work on product-specific Governance, Risk, and Compliance initiatives in partnership with the GRC team.
• Exercise good judgment and discretion in matters of significance and sensitivity.
• Navigate and effectively influence a large, complex organization of product managers, program managers, and engineers in an agile development environment.
• Regular, consistent and punctual attendance required. Must be able to work nights and weekends, variable schedule(s) as necessary.
• Other duties and responsibilities as assigned.

• Experience designing, implementing, and/or managing data and voice products at scale in a telecommunications provider infrastructure
• Cloud security architecture knowledge and expertise
• Experience designing security architectures in a SOC2 and PCI compliance environment

• Understand our Operating Principles; make them the guidelines for how you do your job.
• Own the customer experience - think and act in ways that put our customers first, give them seamless digital options at every touchpoint, and make them promoters of our products and services.
• Know your stuff - be enthusiastic learners, users and advocates of our game-changing technology, products and services, especially our digital tools and experiences.
• Win as a team - make big things happen by working together and being open to new ideas.
• Be an active part of the Net Promoter System - a way of working that brings more employee and customer feedback into the company - by joining huddles, making call backs and helping us elevate opportunities to do better for our customers.
• Drive results and growth.
• Respect and promote inclusion & diversity.
• Do what's right for each other, our customers, investors and our communities.

• This information has been designed to indicate the general nature and level of work performed by employees in this role. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications.