AI-Driven Security Automation Engineer

Comcast (CC) of Willow Grove; Philadelphia (Philadelphia County); On-site; USD 120,000 - 180,000; Full time

Job summary

Comcast is seeking a Software Engineer to design and build scalable platforms and automation for its Cybersecurity Operations Center and partner security teams. The role focuses on threat hunting, incident response, product security, and automation across data sources and tools.

You will develop distributed systems, AI-assisted workflows, and integrations with SIEM, SOAR, cloud, and endpoint technologies, enabling analysts to surface actionable context at scale.

Qualifications

• Bachelor's degree preferred, or substantial related experience.
• 5–7 years in software engineering, security operations, or security automation.
• Experience with large-scale data processing, and distributed systems is a plus.

Responsibilities

• Design, develop, and maintain platforms and services that support CSOC operations and analyst automation.
• Build automation to reduce analyst toil across triage, investigation, enrichment, ticketing, and reporting.
• Develop AI-assisted workflows and LLM-powered agents to summarize events and surface context for analysts and responders.
• Create integrations across SIEM, SOAR, cloud, endpoint, and notification systems.
• Apply data structures and algorithms to process large security datasets and correlations.
• Partner with threat hunters to translate techniques into durable detection and automation capabilities.
• Support PSIRT and product security operations with intake, triage, prioritization, and executive reporting.
• Write well-tested code and uphold engineering best practices in security-sensitive environments.

Skills

Cloud Engineering

LLMs

Machine Learning

Secure Coding Practices

Security Automation

Security Operations

Education

Bachelor's Degree

Job description

Comcast is seeking a Software Engineer to design and build scalable platforms and automation for its Cybersecurity Operations Center and partner security teams. The role focuses on threat hunting, incident response, product security, and automation across data sources and tools.

You will develop distributed systems, AI-assisted workflows, and integrations with SIEM, SOAR, cloud, and endpoint technologies, enabling analysts to surface actionable context at scale.