Senior Cybersecurity Engineer

Make your mark at Comcast -- a Fortune 30 global media and technology company. From the connectivity and platforms we provide, to the content and experiences we create, we reach hundreds of millions of customers, viewers, and guests worldwide. Become part of our award-winning technology team that turns big ideas into cutting-edge products, platforms, and solutions that our customers love.

We create space to innovate, and we recognize, reward, and invest in your ideas, while ensuring you can proudly bring your authentic self to the workplace. Join us. You'll do the best work of your career right here at Comcast. (In most cases, Comcast prefers to have employees on-site collaborating unless the team has been designated as virtual due to the nature of their work.

If a position is listed with both office locations and virtual offerings, Comcast may be willing to consider candidates who live greater than 100 miles from the office for the remote option.)

Job Summary
The CONNECT Cybersecurity & Privacy team partners across Comcast's Technology & Product organization to help protect the applications, platforms, cloud services, infrastructure, and network capabilities that support our customers and business. We focus on practical, measurable security outcomes-using automation, targeted assessments, secure design guidance, and close collaboration with engineering and Comcast Cybersecurity partners to reduce risk and strengthen secure engineering practices at enterprise scale.

In this Senior Engineer (Eng
4) role, you'll help implement security and privacy controls across the CONNECT organization while supporting teams that innovate, build, and operate high-scale applications, platforms, and reliable network services. You'll focus on improving cloud security, strengthening Secure Development Lifecycle practices, and enabling secure internal software development through risk-based guidance, automation, and hands-on collaboration with technical teams.

Job Description

Responsibilities:

• Help design, implement, and mature controls for Secure Development Lifecycle, software security, cloud security, vulnerability management, and privacy initiatives.
• Assess cybersecurity risk across software, cloud, infrastructure, vulnerability management, and privacy programs; translate findings into actionable remediation guidance.
• Provide secure architecture consultation and design guidance for applications, services, platforms, and enterprise technology initiatives.
• Partner with engineering, Dev Ops, and platform teams to embed security into CI/CD pipelines, cloud services, Infrastructure as Code, and internal development practices.
• Perform secure code reviews, application security assessments, threat-focused reviews, and third-party software evaluations to identify and reduce risk.
• Develop automation, reporting, KPIs, and data-driven workflows that improve security visibility, control adoption, vulnerability remediation, and risk reduction.
• Analyze security telemetry, scan results, and large data sets to identify trends, anomalies, recurring issues, and targeted remediation opportunities.
• Communicate cybersecurity risks, findings, and program status to technical teams, leadership, and non-technical stakeholders.
• Mentor team members and drive cybersecurity initiatives to completion while balancing business priorities, scope, timeline, cost, and operational impact.

Qualifications:

• 8+ years of cybersecurity engineering, application security, cloud security, vulnerability management, or secure development experience.
• Bachelor's degree or higher desired;
  Comcast may also consider an equivalent combination of coursework and extensive related professional experience. Cybersecurity certifications are a plus.
• Strong understanding of Secure Development Lifecycle practices, secure code review, threat modeling, application security testing, and risk-based remediation.
• Hands-on experience with vulnerability management, patch management, CVE analysis, impact assessment, prioritization, and remediation tracking.
• Experience securing cloud and Dev Ops environments, including AWS services, CI/CD pipelines, Infrastructure as Code, Terraform, Ansible, containers, Docker, and Kubernetes.
• Programming or automation experience using Python and SQL to support security analytics, reporting, workflow automation, or data-driven risk management.
• Experience working with Foundational AI Models (FAIM) or leveraging AI-enabled approaches to solution cybersecurity challenges, improve security workflows, and support risk-based decision-making.
• Working knowledge of Linux, Windows, network protocols, access controls, firewalls, ACLs, endpoint protection, cryptography, IAM, and secure authentication concepts.
• Experience supporting enterprise-scale environments, high-availability architectures, resilient systems, and cross-functional security programs.
• Ability to analyze large security data sets, identify trends and anomalies, and convert insights into measurable risk reduction actions.
• Strong…