Senior Cybersecurity Engineer

Comcast • Philadelphia, PA

8d • Hybrid

About The Position

The CONNECT Cybersecurity & Privacy team partners across Comcast’s Technology & Product organization to help protect the applications, platforms, cloud services, infrastructure, and network capabilities that support our customers and business. We focus on practical, measurable security outcomes—using automation, targeted assessments, secure design guidance, and close collaboration with engineering and Comcast Cybersecurity partners to reduce risk and strengthen secure engineering practices at enterprise scale. In this Senior Engineer (Eng 4) role, you’ll help implement security and privacy controls across the CONNECT organization while supporting teams that innovate, build, and operate high-scale applications, platforms, and reliable network services. You’ll focus on improving cloud security, strengthening Secure Development Lifecycle practices, and enabling secure internal software development through risk-based guidance, automation, and hands-on collaboration with technical teams.

Requirements

• 8+ years of cybersecurity engineering, application security, cloud security, vulnerability management, or secure development experience.
• Bachelor’s degree or higher desired; Comcast may also consider an equivalent combination of coursework and extensive related professional experience.
• Strong understanding of Secure Development Lifecycle practices, secure code review, threat modeling, application security testing, and risk-based remediation.
• Hands-on experience with vulnerability management, patch management, CVE analysis, impact assessment, prioritization, and remediation tracking.
• Experience securing cloud and DevOps environments, including AWS services, CI/CD pipelines, Infrastructure as Code, Terraform, Ansible, containers, Docker, and Kubernetes.
• Programming or automation experience using Python and SQL to support security analytics, reporting, workflow automation, or data-driven risk management.
• Experience working with Foundational AI Models (FAIM) or leveraging AI-enabled approaches to solution cybersecurity challenges, improve security workflows, and support risk-based decision-making.
• Working knowledge of Linux, Windows, network protocols, access controls, firewalls, ACLs, endpoint protection, cryptography, IAM, and secure authentication concepts.
• Experience supporting enterprise-scale environments, high-availability architectures, resilient systems, and cross-functional security programs.
• Ability to analyze large security data sets, identify trends and anomalies, and convert insights into measurable risk reduction actions.
• Strong communication, critical thinking, technical judgment, and problem-solving skills in complex, fast-changing security and engineering environments.

Nice To Haves

• Cybersecurity certifications are a plus.

Responsibilities

• Help design, implement, and mature controls for Secure Development Lifecycle, software security, cloud security, vulnerability management, and privacy initiatives.
• Assess cybersecurity risk across software, cloud, infrastructure, vulnerability management, and privacy programs; translate findings into actionable remediation guidance.
• Provide secure architecture consultation and design guidance for applications, services, platforms, and enterprise technology initiatives.
• Partner with engineering, DevOps, and platform teams to embed security into CI/CD pipelines, cloud services, Infrastructure as Code, and internal development practices.
• Perform secure code reviews, application security assessments, threat-focused reviews, and third-party software evaluations to identify and reduce risk.
• Develop automation, reporting, KPIs, and data-driven workflows that improve security visibility, control adoption, vulnerability remediation, and risk reduction.
• Analyze security telemetry, scan results, and large data sets to identify trends, anomalies, recurring issues, and targeted remediation opportunities.
• Communicate cybersecurity risks, findings, and program status to technical teams, leadership, and non-technical stakeholders.
• Mentor team members and drive cybersecurity initiatives to completion while balancing business priorities, scope, timeline, cost, and operational impact.

Benefits

• We believe that benefits should connect you to the support you need when it matters most, and should help you care for those who matter most. That's why we provide an array of options, expert guidance and always-on tools that are personalized to meet the needs of your reality—to help support you physically, financially and emotionally through the big milestones and in your everyday life. Please visit the benefits summary on our careers site for more details.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior