Senior Adversary Emulation Architect

Comcast; Philadelphia (Philadelphia County); On-site; USD 150,000 - 190,000; Full time

Job summary

Comcast Cybersecurity seeks a Senior Adversary Emulation Engineer to lead and mature a repeatable adversary emulation capability within Threat Detection. The role sits at the intersection of adversary emulation, threat detection engineering, threat hunting, telemetry validation, and purple team operations.

The successful candidate will design and execute emulation scenarios, validate detections, generate high-fidelity telemetry, and translate findings into improved detections, hunt content, and

Qualifications

• 7+ years of relevant cybersecurity experience including adversary emulation, red/purple teaming, detection engineering, threat hunting, incident response, or security operations.
• Strong understanding of adversary tradecraft, MITRE ATT&CK, threat-informed defense, detection engineering, and enterprise security telemetry.
• Experience safely planning and executing controlled security testing in large or complex enterprise environments with rules of engagement, deconfliction, and evidence handling.
• Proficiency with scripting or automation using Python and at least one other language or shell such as PowerShell or Bash.

Responsibilities

• Establish and mature Comcast's adversary emulation capability, including operating model, rules of engagement, approvals, success metrics, and reporting standards.
• Design, plan, and execute controlled adversary emulation scenarios based on threat intel and Comcast risk scenarios.
• Emulate real-world attacker tactics using MITRE ATT&CK while maintaining safety, deconfliction, and governance.
• Build automation and AI-assisted workflows to streamline planning, evidence collection, test execution, detection validation, and reporting.
• Partner with Threat Detection Engineering to validate detection coverage, alert fidelity, enrichment quality, triage, and detection lifecycle.
• Collaborate with Threat Hunting to generate high-fidelity telemetry and validate hypotheses for hunts.
• Identify and document logging gaps, telemetry quality issues, and data-quality deficiencies across endpoints, identity, cloud, network, and SaaS sources.
• Develop repeatable emulation playbooks, test cases, validation workflows, and reporting artifacts.
• Evaluate adversary emulation, breach-and-attack simulation, security validation, and AI-enabled security technologies for use.
• Support purple team exercises, threat-informed defense initiatives, after-action reviews, and continuous improvement across cyber operations.
• Produce clear technical reports and executive-ready summaries translating emulation results into prioritized remediation actions.
• Collaborate across Cybersecurity, Security Operations, Threat Intelligence, Threat Hunting, Detection Engineering, Cloud, Identity, Endpoint, Network, and Product teams.

Skills

Cyber Threat Intelligence

Incident Response

Security Engineering

Penetration Testing

Artificial Intelligence Technologies

Security Testing

Cyber Defense

Education

Bachelor's Degree

Job description

Comcast Cybersecurity seeks a Senior Adversary Emulation Engineer to lead and mature a repeatable adversary emulation capability within Threat Detection. The role sits at the intersection of adversary emulation, threat detection engineering, threat hunting, telemetry validation, and purple team operations.

The successful candidate will design and execute emulation scenarios, validate detections, generate high-fidelity telemetry, and translate findings into improved detections, hunt content, and