Security Automation & AIOps Engineer

Comcast Corp.; Philadelphia, Northern (Philadelphia County, KY); Hybrid; USD 120,000 - 190,000; Full time

Job summary

Comcast is seeking a Software Engineer to design and build intelligent platforms, automation systems, and data-driven workflows for the Cybersecurity Operations Center. You will develop tools to detect threats, triage signals, and surface context to analysts and responders, while working across front-end and back-end technologies.

You will design distributed systems, automate security workflows, and integrate security platforms with large-scale data processing.

Qualifications

• Bachelor's degree preferred; combination of coursework and experience may be considered.
• Experience with cloud platforms and data processing is valued.
• 5-7 years of relevant work experience in security/computing preferred.

Responsibilities

• Design, develop, and maintain internal platforms and services supporting CSOC operations and automation.
• Build automation to reduce analyst toil across alert triage, investigations, and handoffs.
• Develop AI-assisted workflows and LLM-powered agents to summarize events and enrich investigations.
• Create integrations across SIEM, SOAR, ticketing, cloud, and data platforms.
• Apply data structures and algorithms to correlate large security data sets.
• Collaborate with threat hunters and incident responders to convert techniques into durable tooling.
• Support PSIRT and product security workflows with prioritized remediation tracking.
• Write well-tested code and uphold engineering best practices in security-critical environments.

Skills

Cloud Engineering

LLMs

ML Model Management

Secure Coding Practices

Security Automation

Security Operations

Education

Bachelor's Degree

Tools

OpenAI SDK

LangChain

LangGraph

SIEM

SOAR

EDR

Job description

Comcast is seeking a Software Engineer to design and build intelligent platforms, automation systems, and data-driven workflows for the Cybersecurity Operations Center. You will develop tools to detect threats, triage signals, and surface context to analysts and responders, while working across front-end and back-end technologies.

You will design distributed systems, automate security workflows, and integrate security platforms with large-scale data processing.