Senior Adversary Emulation Engineer - AI-Driven Security

Comcast; Philadelphia (Philadelphia County); Presencial; USD 150.000 - 210.000; Jornada completa

Descripción de la vacante

Comcast Cybersecurity is seeking a Senior Adversary Emulation Engineer to mature repeatable emulation capabilities across enterprise environments. You will design controlled scenarios, validate detections, and generate high‑fidelity telemetry for threat hunting.

The role operates at the intersection of threat intelligence, detection engineering, and purple team activities in a large, complex network. You will collaborate with security engineers, incident responders, and threat hunters to improve

Formación

• Experience in adversary emulation, red/purple teaming, threat hunting, incident response, or security operations.
• Strong understanding of adversary tradecraft, MITRE ATT&CK, threat-informed defense, and enterprise telemetry.
• Proficiency with scripting/automation using Python and PowerShell or Bash.
• Experience with SIEM, XDR/EDR, identity, cloud, network, and email telemetry; detection/hunting logic guidance.

Responsabilidades

• Design, plan, and execute adversary emulation scenarios based on threat intel and risk scenarios.
• Emulate attacker techniques using MITRE ATT&CK with safety, deconfliction, and governance.
• Build automation and AI-assisted workflows for planning, evidence collection, and reporting.
• Collaborate with Threat Detection Engineering to validate detection coverage and tooling.
• Generate telemetry for threat hunting and convert results into actionable detections and hunt content.
• Produce technical reports and executive-ready summaries translating findings into remediation actions.

Conocimientos

Adversary emulation

Red teaming

Purple teaming

MITRE ATT&CK

Threat detection engineering

Educación

Bachelor’s degree in cybersecurity or related field

Herramientas

Atomic Red Team

MITRE Caldera

Mandiant Security Validation

Cymulate

AttackIQ

Prelude Operator

Descripción del empleo

Comcast Cybersecurity is seeking a Senior Adversary Emulation Engineer to mature repeatable emulation capabilities across enterprise environments. You will design controlled scenarios, validate detections, and generate high‑fidelity telemetry for threat hunting.

The role operates at the intersection of threat intelligence, detection engineering, and purple team activities in a large, complex network. You will collaborate with security engineers, incident responders, and threat hunters to improve