Software Engineer, Security Automation & AI Operations

Comcast; Philadelphia (Philadelphia County); On-site; USD 120,000 - 190,000; Full time

Benefits offered by this job

Benefits package

Bonus eligibility

Job summary

Comcast is seeking a Software Engineer for the Cybersecurity Operations Center to design and build intelligent platforms, automation systems, and data-driven workflows. You will enable threat hunting, incident response, PSIRT intake, and product security workflows, while integrating security platforms and scaling across front-end to back-end systems.

The role emphasizes distributed systems, data processing, and AI-assisted security automation, with collaboration across security, engineering, and

Qualifications

• Bachelor's degree is required; Comcast may consider candidates with coursework/experience or extensive related professional experience.

Responsibilities

• Design, develop, and maintain internal platforms and services that support CSOC operations, threat hunting, incident response, PSIRT intake, product security workflows, risk prioritization, and analyst automation.
• Build automation that reduces analyst toil across alert triage, investigation enrichment, evidence collection, case management, ticketing, notifications, reporting, and operational handoffs.
• Develop LLM-powered agents and AI-assisted workflows that summarize security events, enrich investigations, automate repetitive triage steps, and surface relevant context to analysts, hunters, responders, and product security teams.
• Build integrations across security telemetry, SIEM, SOAR, ticketing, source control, scanning, cloud, endpoint, and notification systems.
• Apply strong data structures and algorithms to process and correlate large volumes of security data, including alerts, incidents, assets, dependency graphs, source repositories, detections, and operational metadata.
• Partner with threat hunters and incident responders to turn repeatable investigative techniques into durable detection, enrichment, and automation capabilities.
• Support PSIRT and product security operations by building workflows for intake, triage, prioritization, remediation tracking, and executive-ready reporting.
• Design secure, observable, and maintainable services that can operate reliably in security-sensitive production environments.
• Write well-tested code, participate in code reviews, and uphold engineering best practices for systems that support high-pressure security operations.

Skills

Security Automation

Cloud Engineering

Large Language Models

Secure Coding Practices

Machine Learning Model Management

Security Operations

Education

Bachelor's Degree

Tools

SIEM

SOAR

EDR

Case management systems

Security data lake

Job description

Make your mark at Comcast -- a Fortune 30 global media and technology company. From the connectivity and platforms we provide, to the content and experiences we create, we reach hundreds of millions of customers, viewers, and guests worldwide. Become part of our award-winning technology team that turns big ideas into cutting-edge products, platforms, and solutions that our customers love. We create space to innovate, and we recognize, reward, and invest in your ideas, while ensuring you can proudly bring your authentic self to the workplace. Join us. You’ll do the best work of your career right here at Comcast. (In most cases, Comcast prefers to have employees on‑site collaborating unless the team has been designated as virtual due to the nature of their work. If a position is listed with both office locations and virtual offerings, Comcast may be willing to consider candidates who live greater than 100 miles from the office for the remote option.)

Job Summary

To protect Comcast’s vast ecosystem, we have to move faster than automated threats. We are seeking a Software Engineer to design and build intelligent platforms, automation systems, and data-driven workflows that enable the Cybersecurity Operations Center and partner security teams to operate at scale. This role supports critical security operations functions including threat hunting, incident response, PSIRT, product security, vulnerability risk management, and analyst workflow automation. You will build tools that help security teams detect suspicious activity, triage operational signals, correlate security data, automate repeatable actions, and surface timely context to analysts and responders. This is a hands-on engineering role at the intersection of software development, security operations, data engineering, and applied AI. The ideal candidate is a strong software engineer with a passion for building scalable systems and solving complex security operational problems. You should be comfortable designing distributed systems, developing automation workflows, integrating security platforms, and working across both front-end and back-end technologies. This role requires a strong foundation in data structures, system design, and large-scale data processing, along with the ability to analyze and correlate high-volume security telemetry, incident data, asset context, product security findings, and operational signals.

Job Description

Responsibilities:

• Design, develop, and maintain internal platforms and services that support CSOC operations, threat hunting, incident response, PSIRT intake, product security workflows, risk prioritization, and analyst automation.
• Build automation that reduces analyst toil across alert triage, investigation enrichment, evidence collection, case management, ticketing, notifications, reporting, and operational handoffs.
• Develop LLM-powered agents and AI-assisted workflows that summarize security events, enrich investigations, automate repetitive triage steps, and surface relevant context to analysts, hunters, responders, and product security teams.
• Build integrations across security telemetry, SIEM, SOAR, ticketing, source control, scanning, cloud, endpoint, and notification systems.
• Apply strong data structures and algorithms to process and correlate large volumes of security data, including alerts, incidents, assets, dependency graphs, source repositories, detections, and operational metadata.
• Partner with threat hunters and incident responders to turn repeatable investigative techniques into durable detection, enrichment, and automation capabilities.
• Support PSIRT and product security operations by building workflows for intake, triage, prioritization, remediation tracking, and executive-ready reporting.
• Design secure, observable, and maintainable services that can operate reliably in security-sensitive production environments.
• Write well-tested code, participate in code reviews, and uphold engineering best practices for systems that support high-pressure security operations.

Preferred Qualifications

• Familiarity with SIEM, SOAR, EDR, case management, security data lake, or security operations platforms.
• Familiarity with Databricks, Snowflake, Spark, or similar large-scale data processing platforms.
• Experience with one or more cloud platforms such as AWS, GCP, or Azure.
• Experience building analyst-facing tools, dashboards, automation frameworks, or internal platforms.
• Familiarity with OpenAI SDK, LangChain, LangGraph, agentic workflows, retrieval-augmented generation, or AI-assisted security operations.
• Familiarity with OWASP Top 10, secure coding practices, software supply chain security, dependency risk, or application security concepts.
• Experience translating manual security workflows into scalable software, automation, or data products.

Disclaimer:

This information has been designed to indicate the general nature and level of work performed by employees in this role. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications.

Comcast is an equal opportunity workplace. We will consider all qualified applicants for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, veteran status, genetic information, or any other basis protected by applicable law.

Skills:

• Security Automation
• Cloud Engineering
• Large Language Models (LLMs)
• Secure Coding Practices
• Machine Learning Model Management
• Security Operations

Base pay is one part of the Total Rewards that Comcast provides to compensate and recognize employees for their work. Most sales positions are eligible for a Commission under the terms of an applicable plan, while most non-sales positions are eligible for a Bonus. Additionally, Comcast provides best-in-class Benefits to eligible employees. We believe that benefits should connect you to the support you need when it matters most, and should help you care for those who matter most. That’s why we provide an array of options, expert guidance and always-on tools, that are personalized to meet the needs of your reality - to help support you physically, financially and emotionally through the big milestones and in your everyday life. Please visit the compensation and benefits summary on our careers site for more details.

Education

Bachelor's Degree

While possessing the stated degree is preferred, Comcast also may consider applicants who hold some combination of coursework and experience, or who have extensive related professional experience.

Relevant Work Experience

5-7 Years