Senior Cloud Security Engineer - SDLC & Automation

Blueface Ltd; Philadelphia (Philadelphia County); On-site; USD 120,000 - 190,000; Full time

Job summary

Comcast is seeking a Senior Cybersecurity Engineer to join the CONNECT Cybersecurity & Privacy team. You will help design and implement security controls across cloud, software, and infrastructure, while collaborating with engineering, DevOps, and platform teams to embed security into CI/CD and IaC.

You will lead secure code reviews, risk assessments, and threat-focused evaluations, driving automation, reporting, and risk reduction initiatives at enterprise scale.

Qualifications

• 8+ years of cybersecurity engineering, application security, cloud security, vulnerability management, or secure development experience.
• Bachelor’s degree or higher desired; Comcast may also consider an equivalent combination of coursework and extensive related professional experience.
• Cybersecurity certifications are a plus.
• Strong understanding of Secure Development Lifecycle practices, secure code review, threat modeling, application security testing, and risk-based remediation.
• Hands-on experience with vulnerability management, patch management, CVE analysis, impact assessment, prioritization, and remediation tracking.
• Experience securing cloud and DevOps environments, including AWS services, CI/CD pipelines, Infrastructure as Code, Terraform, Ansible, containers, Docker, and Kubernetes.
• Programming or automation experience using Python and SQL to support security analytics, reporting, workflow automation, or data-driven risk management.
• Experience working with FAIM or AI-enabled approaches to solution cybersecurity challenges and risk-based decision-making.
• Working knowledge of Linux, Windows, network protocols, access controls, firewalls, ACLs, endpoint protection, cryptography, IAM, and secure authentication concepts.
• Experience supporting enterprise-scale environments, high-availability architectures, resilient systems, and cross-functional security programs.
• Ability to analyze large security data sets, identify trends and anomalies, and convert insights into measurable risk reduction actions.
• Strong communication, critical thinking, technical judgment, and problem-solving skills in complex security and engineering environments.

Responsibilities

• Design, implement, and mature Secure Development Lifecycle, software security, cloud security, vulnerability management, and privacy initiatives.
• Assess cybersecurity risk across software, cloud, infrastructure, vulnerability management, and privacy programs; translate findings into remediation guidance.
• Provide secure architecture consultation for applications, services and platforms.
• Partner with engineering, DevOps, and platform teams to embed security into CI/CD pipelines, cloud services, and IaC.
• Perform secure code reviews, security assessments, threat-focused reviews, and third-party software evaluations.
• Develop automation, reporting, KPIs, and workflows to improve security visibility and risk reduction.
• Analyze telemetry, scan results, and large data sets to identify trends and remediation opportunities.
• Communicate cybersecurity risks and program status to technical teams, leadership, and non-technical stakeholders.
• Mentor team members and drive cybersecurity initiatives to completion.

Skills

Cybersecurity

DevOps

Linux System Administration

Secure Code Review

Security Evaluations

Education

Bachelor's degree

Tools

AWS

Terraform

Ansible

Docker

Kubernetes

Job description

Comcast is seeking a Senior Cybersecurity Engineer to join the CONNECT Cybersecurity & Privacy team. You will help design and implement security controls across cloud, software, and infrastructure, while collaborating with engineering, DevOps, and platform teams to embed security into CI/CD and IaC.

You will lead secure code reviews, risk assessments, and threat-focused evaluations, driving automation, reporting, and risk reduction initiatives at enterprise scale.