AI-Driven Security Automation Engineer

Comcast; Philadelphia (Philadelphia County); On-site; USD 120,000 - 190,000; Full time

Benefits offered by this job

Benefits package

Bonus eligibility

Job summary

Comcast is seeking a Software Engineer for the Cybersecurity Operations Center to design and build intelligent platforms, automation systems, and data-driven workflows. You will enable threat hunting, incident response, PSIRT intake, and product security workflows, while integrating security platforms and scaling across front-end to back-end systems.

The role emphasizes distributed systems, data processing, and AI-assisted security automation, with collaboration across security, engineering, and

Qualifications

• Bachelor's degree is required; Comcast may consider candidates with coursework/experience or extensive related professional experience.

Responsibilities

• Design, develop, and maintain internal platforms and services that support CSOC operations, threat hunting, incident response, PSIRT intake, product security workflows, risk prioritization, and analyst automation.
• Build automation that reduces analyst toil across alert triage, investigation enrichment, evidence collection, case management, ticketing, notifications, reporting, and operational handoffs.
• Develop LLM-powered agents and AI-assisted workflows that summarize security events, enrich investigations, automate repetitive triage steps, and surface relevant context to analysts, hunters, responders, and product security teams.
• Build integrations across security telemetry, SIEM, SOAR, ticketing, source control, scanning, cloud, endpoint, and notification systems.
• Apply strong data structures and algorithms to process and correlate large volumes of security data, including alerts, incidents, assets, dependency graphs, source repositories, detections, and operational metadata.
• Partner with threat hunters and incident responders to turn repeatable investigative techniques into durable detection, enrichment, and automation capabilities.
• Support PSIRT and product security operations by building workflows for intake, triage, prioritization, remediation tracking, and executive-ready reporting.
• Design secure, observable, and maintainable services that can operate reliably in security-sensitive production environments.
• Write well-tested code, participate in code reviews, and uphold engineering best practices for systems that support high-pressure security operations.

Skills

Security Automation

Cloud Engineering

Large Language Models

Secure Coding Practices

Machine Learning Model Management

Security Operations

Education

Bachelor's Degree

Tools

SIEM

SOAR

EDR

Case management systems

Security data lake

Job description

Comcast is seeking a Software Engineer for the Cybersecurity Operations Center to design and build intelligent platforms, automation systems, and data-driven workflows. You will enable threat hunting, incident response, PSIRT intake, and product security workflows, while integrating security platforms and scaling across front-end to back-end systems.

The role emphasizes distributed systems, data processing, and AI-assisted security automation, with collaboration across security, engineering, and