Senior Cybersecurity Engineer

Comcast; Philadelphia (Philadelphia County); On-site; USD 140,000 - 190,000; Full time

Job summary

Comcast is seeking a Senior Cybersecurity Engineer to help design and implement security controls across cloud services, applications, and platforms. You will work with engineering, DevOps, and security partners to embed security into CI/CD and Infrastructure as Code.

You will analyze risk, perform secure code reviews, and mentor team members while delivering measurable risk reductions in a high-scale enterprise environment.

Qualifications

• 8+ years in cybersecurity engineering, application security, cloud security, vulnerability management, or secure development.
• Bachelor’s degree or higher; equivalent experience considered; cybersecurity certifications are a plus.
• Strong understanding of Secure Development Lifecycle, secure code review, threat modeling, and risk-based remediation.
• Hands-on with vulnerability, patch management, CVE analysis, impact assessment, prioritization, and remediation tracking.
• Experience securing cloud and DevOps environments including AWS, CI/CD, Terraform, Ansible, containers, and IaC.

Responsibilities

• Design, implement, and mature controls for Secure SDLC, software security, cloud security, vulnerability management, and privacy initiatives.
• Assess cybersecurity risk across software, cloud, infra, and privacy programs; translate findings into remediation guidance.
• Provide secure architecture consultation for applications, services, platforms, and enterprise tech initiatives.
• Embed security into CI/CD pipelines, cloud services, and IaC; collaborate with engineering teams.

Skills

Secure SDLC

Threat modeling

Vulnerability management

CI/CD security

Python

SQL

AI/FAIM

Linux/Windows

IAM/cryptography

Education

Bachelor’s Degree

Tools

Terraform

Ansible

Docker

Kubernetes

AWS

Job description

Make your mark at Comcast -- a Fortune 30 global media and technology company. From the connectivity and platforms we provide, to the content and experiences we create, we reach hundreds of millions of customers, viewers, and guests worldwide. Become part of our award-winning technology team that turns big ideas into cutting-edge products, platforms, and solutions that our customers love. We create space to innovate, and we recognize, reward, and invest in your ideas, while ensuring you can proudly bring your authentic self to the workplace. Join us. You’ll do the best work of your career right here at Comcast. (In most cases, Comcast prefers to have employees on-site collaborating unless the team has been designated as virtual due to the nature of their work. If a position is listed with both office locations and virtual offerings, Comcast may be willing to consider candidates who live greater than 100 miles from the office for the remote option.)

Job Summary

The CONNECT Cybersecurity & Privacy team partners across Comcast’s Technology & Product organization to help protect the applications, platforms, cloud services, infrastructure, and network capabilities that support our customers and business. We focus on practical, measurable security outcomes—using automation, targeted assessments, secure design guidance, and close collaboration with engineering and Comcast Cybersecurity partners to reduce risk and strengthen secure engineering practices at enterprise scale. In this Senior Engineer (Eng 4) role, you’ll help implement security and privacy controls across the CONNECT organization while supporting teams that innovate, build, and operate high-scale applications, platforms, and reliable network services. You’ll focus on improving cloud security, strengthening Secure Development Lifecycle practices, and enabling secure internal software development through risk-based guidance, automation, and hands‑on collaboration with technical teams.

Job Description

Responsibilities

• Help design, implement, and mature controls for Secure Development Lifecycle, software security, cloud security, vulnerability management, and privacy initiatives.
• Assess cybersecurity risk across software, cloud, infrastructure, vulnerability management, and privacy programs; translate findings into actionable remediation guidance.
• Provide secure architecture consultation and design guidance for applications, services, platforms, and enterprise technology initiatives.
• Partner with engineering, DevOps, and platform teams to embed security into CI/CD pipelines, cloud services, Infrastructure as Code, and internal development practices.
• Perform secure code reviews, application security assessments, threat‑focused reviews, and third‑party software evaluations to identify and reduce risk.
• Develop automation, reporting, KPIs, and data‑driven workflows that improve security visibility, control adoption, vulnerability remediation, and risk reduction.
• Analyze security telemetry, scan results, and large data sets to identify trends, anomalies, recurring issues, and targeted remediation opportunities.
• Communicate cybersecurity risks, findings, and program status to technical teams, leadership, and non‑technical stakeholders.
• Mentor team members and drive cybersecurity initiatives to completion while balancing business priorities, scope, timeline, cost, and operational impact.

Qualifications

• 8+ years of cybersecurity engineering, application security, cloud security, vulnerability management, or secure development experience.
• Bachelor’s degree or higher desired; Comcast may also consider an equivalent combination of coursework and extensive related professional experience. Cybersecurity certifications are a plus.
• Strong understanding of Secure Development Lifecycle practices, secure code review, threat modeling, application security testing, and risk‑based remediation.
• Hands‑on experience with vulnerability management, patch management, CVE analysis, impact assessment, prioritization, and remediation tracking.
• Experience securing cloud and DevOps environments, including AWS services, CI/CD pipelines, Infrastructure as Code, Terraform, Ansible, containers, Docker, and Kubernetes.
• Programming or automation experience using Python and SQL to support security analytics, reporting, workflow automation, or data‑driven risk management.
• Experience working with Foundational AI Models (FAIM) or leveraging AI‑enabled approaches to solution cybersecurity challenges, improve security workflows, and support risk‑based decision‑making.
• Working knowledge of Linux, Windows, network protocols, access controls, firewalls, ACLs, endpoint protection, cryptography, IAM, and secure authentication concepts.
• Experience supporting enterprise‑scale environments, high‑availability architectures, resilient systems, and cross‑functional security programs.
• Ability to analyze large security data sets, identify trends and anomalies, and convert insights into measurable risk reduction actions.
• Strong communication, critical thinking, technical judgment, and problem‑solving skills in complex, fast‑changing security and engineering environments.

Employees at all levels are expected to:

• Understand our Operating Principles; make them the guidelines for how you do your job.
• Own the customer experience think and act in ways that put our customers first, give them seamless digital options at every touchpoint, and make them promoters of our products and services.
• Know your stuff be enthusiastic learners, users and advocates of our game‑changing technology, products and services, especially our digital tools and experiences.
• Win as a team make big things happen by working together and being open to new ideas.
• Be an active part of the Net Promoter System a way of working that brings more employee and customer feedback into the company by joining huddles, making call backs and helping us elevate opportunities to do better for our customers.
• Drive results and growth.
• Support a culture of inclusion in how you work and lead.
• Do what's right for each other, our customers, investors and our communities.

Disclaimer

This information has been designed to indicate the general nature and level of work performed by employees in this role. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications.

Comcast is an equal opportunity workplace. We will consider all qualified applicants for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, veteran status, genetic information, or any other basis protected by applicable law.

Skills

Cybersecurity; DevOps; Linux System Administration; Security Evaluations; Secure Code Review

Base pay is one part of the Total Rewards that Comcast provides to compensate and recognize employees for their work. Most sales positions are eligible for a Commission under the terms of an applicable plan, while most non-sales positions are eligible for a Bonus. Additionally, Comcast provides best‑in‑class Benefits to eligible employees. We believe that benefits should connect you to the support you need when it matters most, and should help you care for those who matter most. That’s why we provide an array of options, expert guidance and always‑on tools, that are personalized to meet the needs of your reality - to help support you physically, financially and emotionally through the big milestones and in your everyday life. Please visit the compensation and benefits summary on our careers site for more details.

Education

Bachelor's Degree

While possessing the stated degree is preferred, Comcast also may consider applicants who hold some combination of coursework and experience, or who have extensive related professional experience.

Relevant Work Experience

7-10 Years