Senior SOC Engineer: Automation, API & Web Apps

Comcast; Plano (AL); On-site; USD 110,000 - 170,000; Full time

Job summary

Comcast is seeking an experienced Security Operations Center engineer to design, implement, and resolve complex security operations issues. You will collaborate with team leaders to close tooling and process gaps, mentor junior analysts, and develop automation and internal web applications to enhance SOC capabilities.

Ideal candidates have strong programming and web application security knowledge, familiarity with security platforms ( SentinelOne, Swimlane, Elastic, Rapid7 ), and a proactive

Qualifications

• Bachelor's degree required or equivalent work experience.
• 7-10 years of relevant security operations experience.
• Strong programming, scripting, and automation skills.
• Experience designing and implementing SOC tooling and processes.

Responsibilities

• Develop and maintain automation scripts to streamline security operations and response workflows.
• Build internal web applications that support security operations.
• Integrate and troubleshoot security tools via APIs for data exchange and efficiency.
• Collaborate with leaders to close tooling and process gaps in SOC.
• Mentor junior SOC engineers on secure configurations, Python automation, and API usage.
• Evaluate new security technologies and automation opportunities for SOC.
• Contribute to SOC runbooks, configuration management, and documentation.
• Exercise independent judgment on technically impactful matters.
• Take initiative for improvements and bug fixes.
• Apply data analysis to generate insights for decision-making.

Skills

Python

APIs

Web security

Automation

Security Operations Center

Team leadership

Education

Bachelor's Degree

Tools

SentinelOne

Swimlane

Elastic

Rapid7

Job description

Comcast is seeking an experienced Security Operations Center engineer to design, implement, and resolve complex security operations issues. You will collaborate with team leaders to close tooling and process gaps, mentor junior analysts, and develop automation and internal web applications to enhance SOC capabilities.

Ideal candidates have strong programming and web application security knowledge, familiarity with security platforms ( SentinelOne, Swimlane, Elastic, Rapid7 ), and a proactive