Senior Cybersecurity Engineer: Cloud & DevSecOps Innovator

Comcast; Philadelphia (Philadelphia County); On-site; USD 140,000 - 190,000; Full time

Job summary

Comcast is seeking a Senior Cybersecurity Engineer to help design and implement security controls across cloud services, applications, and platforms. You will work with engineering, DevOps, and security partners to embed security into CI/CD and Infrastructure as Code.

You will analyze risk, perform secure code reviews, and mentor team members while delivering measurable risk reductions in a high-scale enterprise environment.

Qualifications

• 8+ years in cybersecurity engineering, application security, cloud security, vulnerability management, or secure development.
• Bachelor’s degree or higher; equivalent experience considered; cybersecurity certifications are a plus.
• Strong understanding of Secure Development Lifecycle, secure code review, threat modeling, and risk-based remediation.
• Hands-on with vulnerability, patch management, CVE analysis, impact assessment, prioritization, and remediation tracking.
• Experience securing cloud and DevOps environments including AWS, CI/CD, Terraform, Ansible, containers, and IaC.

Responsibilities

• Design, implement, and mature controls for Secure SDLC, software security, cloud security, vulnerability management, and privacy initiatives.
• Assess cybersecurity risk across software, cloud, infra, and privacy programs; translate findings into remediation guidance.
• Provide secure architecture consultation for applications, services, platforms, and enterprise tech initiatives.
• Embed security into CI/CD pipelines, cloud services, and IaC; collaborate with engineering teams.

Skills

Secure SDLC

Threat modeling

Vulnerability management

CI/CD security

Python

SQL

AI/FAIM

Linux/Windows

IAM/cryptography

Education

Bachelor’s Degree

Tools

Terraform

Ansible

Docker

Kubernetes

AWS

Job description

Comcast is seeking a Senior Cybersecurity Engineer to help design and implement security controls across cloud services, applications, and platforms. You will work with engineering, DevOps, and security partners to embed security into CI/CD and Infrastructure as Code.

You will analyze risk, perform secure code reviews, and mentor team members while delivering measurable risk reductions in a high-scale enterprise environment.