Software Engineer, Security Automation & AI Operations

Comcast (CC) of Willow Grove

Philadelphia (Philadelphia County)

On-site

USD 120,000 - 180,000

Full time

6 days ago
Be an early applicant

Get more replies from employers

Send a job-specific resume in minutes.

Job summary

Comcast is seeking a Software Engineer to design and build scalable platforms and automation for its Cybersecurity Operations Center and partner security teams. The role focuses on threat hunting, incident response, product security, and automation across data sources and tools.

You will develop distributed systems, AI-assisted workflows, and integrations with SIEM, SOAR, cloud, and endpoint technologies, enabling analysts to surface actionable context at scale.

Qualifications

  • Bachelor's degree preferred, or substantial related experience.
  • 5–7 years in software engineering, security operations, or security automation.
  • Experience with large-scale data processing, and distributed systems is a plus.

Responsibilities

  • Design, develop, and maintain platforms and services that support CSOC operations and analyst automation.
  • Build automation to reduce analyst toil across triage, investigation, enrichment, ticketing, and reporting.
  • Develop AI-assisted workflows and LLM-powered agents to summarize events and surface context for analysts and responders.
  • Create integrations across SIEM, SOAR, cloud, endpoint, and notification systems.
  • Apply data structures and algorithms to process large security datasets and correlations.
  • Partner with threat hunters to translate techniques into durable detection and automation capabilities.
  • Support PSIRT and product security operations with intake, triage, prioritization, and executive reporting.
  • Write well-tested code and uphold engineering best practices in security-sensitive environments.

Skills

Cloud Engineering
LLMs
Machine Learning
Secure Coding Practices
Security Automation
Security Operations

Education

Bachelor's Degree

Job description

Make your mark at Comcast -- a Fortune 30 global media and technology company.

From the connectivity and platforms we provide, to the content and experiences we create, we reach hundreds of millions of customers, viewers, and guests worldwide. Become part of our award-winning technology team that turns big ideas into cutting-edge products, platforms, and solutions that our customers love. We create space to innovate, and we recognize, reward, and invest in your ideas, while ensuring you can proudly bring your authentic self to the workplace. Join us. You’ll do the best work of your career right here at Comcast.

(In most cases, Comcast prefers to have employees on-site collaborating unless the team has been designated as virtual due to the nature of their work. If a position is listed with both office locations and virtual offerings, Comcast may be willing to consider candidates who live greater than 100 miles from the office for the remote option.)

Job Summary

To protect Comcast’s vast ecosystem, we have to move faster than automated threats. We are seeking a Software Engineer to design and build intelligent platforms, automation systems, and data-driven workflows that enable the Cybersecurity Operations Center and partner security teams to operate at scale. This role supports critical security operations functions including threat hunting, incident response, PSIRT, product security, vulnerability risk management, and analyst workflow automation. You will build tools that help security teams detect suspicious activity, triage operational signals, correlate security data, automate repeatable actions, and surface timely context to analysts and responders. This is a hands‑on engineering role at the intersection of software development, security operations, data engineering, and applied AI. The ideal candidate is a strong software engineer with a passion for building scalable systems and solving complex security operational problems. You should be comfortable designing distributed systems, developing automation workflows, integrating security platforms, and working across both front‑end and back‑end technologies. This role requires a strong foundation in data structures, system design, and large‑scale data processing, along with the ability to analyze and correlate high‑volume security telemetry, incident data, asset context, product security findings, and operational signals.

Responsibilities
  • Design, develop, and maintain internal platforms and services that support CSOC operations, threat hunting, incident response, PSIRT intake, product security workflows, risk prioritization, and analyst automation.
  • Build automation that reduces analyst toil across alert triage, investigation enrichment, evidence collection, case management, ticketing, notifications, reporting, and operational handoffs.
  • Develop LLM-powered agents and AI-assisted workflows that summarize security events, enrich investigations, automate repetitive triage steps, and surface relevant context to analysts, hunters, responders, and product security teams.
  • Build integrations across security telemetry, SIEM, SOAR, ticketing, source control, scanning, cloud, endpoint, and notification systems.
  • Apply strong data structures and algorithms to process and correlate large volumes of security data, including alerts, incidents, assets, dependency graphs, source repositories, detections, and operational metadata.
  • Partner with threat hunters and incident responders to turn repeatable investigative techniques into durable detection, enrichment, and automation capabilities.
  • Support PSIRT and product security operations by building workflows for intake, triage, prioritization, remediation tracking, and executive‑ready reporting.
  • Design secure, observable, and maintainable services that can operate reliably in security-sensitive production environments.
  • Write well‑tested code, participate in code reviews, and uphold engineering best practices for systems that support high‑pressure security operations.
Preferred Qualifications
  • Familiarity with SIEM, SOAR, EDR, case management, security data lake, or security operations platforms.
  • Familiarity with Databricks, Snowflake, Spark, or similar large‑scale data processing platforms.
  • Experience with one or more cloud platforms such as AWS, GCP, or Azure.
  • Experience building analyst-facing tools, dashboards, automation frameworks, or internal platforms.
  • Familiarity with OpenAI SDK, LangChain, LangGraph, agentic workflows, retrieval‑augmented generation, or AI‑assisted security operations.
  • Familiarity with OWASP Top 10, secure coding practices, software supply chain security, dependency risk, or application security concepts.
  • Experience translating manual security workflows into scalable software, automation, or data products.
Skills
  • Cloud Engineering
  • Large Language Models (LLMs)
  • Machine Learning Model Management
  • Secure Coding Practices
  • Security Automation
  • Security Operations

We believe that benefits should connect you to the support you need when it matters most, and should help you care for those who matter most. That's why we provide an array of options, expert guidance and always‑on tools that are personalized to meet the needs of your reality—to help support you physically, financially and emotionally through the big milestones and in your everyday life. Please visit the benefits summary on our careers site for more details.

Education

Bachelor's Degree While possessing the stated degree is preferred, Comcast also may consider applicants who hold some combination of coursework and experience, or who have extensive related professional experience.

Relevant Work Experience

5-7 Years

Comcast is an equal opportunity workplace.

We will consider all qualified applicants for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, veteran status, genetic information, or any other basis protected by applicable law.

At Comcast , you have the power to connect the world. Your career options are endless as you grow in your career. Explore your future with access to a variety of teams, locations, and resources in an expanding network. You can also explore additional opportunities at our company, NBCUniversal.

Get your free, confidential resume review.
or drag and drop your file here.
Similar jobs

Similar jobs worth comparing

Software Engineer, Security Automation & AI Operations
Software Engineer, Security Automation & AI Operations

Comcast Corp. • Philadelphia, Northern (KY)

Hybrid
USD 120,000 - 190,000
Software Engineer, Security Automation & AI Operations
Software Engineer, Security Automation & AI Operations

Comcast • Philadelphia

On-site
USD 120,000 - 190,000
Benefits package
Bonus eligibility
Senior Cybersecurity Engineer
Senior Cybersecurity Engineer

Comcast • Philadelphia

On-site
USD 140,000 - 190,000
Cyber Security Engineer - RADIUS, TACACS+
Cyber Security Engineer - RADIUS, TACACS+

Comcast (CC) of Willow Grove • Mount Laurel Township (NJ)

On-site
USD 105,000 - 157,000
Engineer 4, SOC, Comcast Business
Engineer 4, SOC, Comcast Business

Comcast • Plano (TX)

On-site
USD 95,000 - 135,000
Cyber Security Engineer - RADIUS, TACACS+
Cyber Security Engineer - RADIUS, TACACS+

Comcast • Mount Laurel Township (NJ)

On-site
USD 105,000 - 157,000
Senior Platform Engineer, Agentic Systems
Senior Platform Engineer, Agentic Systems

Comcast • Philadelphia

On-site
USD 150,000 - 210,000
Software Developer, Data Platform Engineering
Software Developer, Data Platform Engineering

Comcast Corp. • Chester, Northern (KY)

Hybrid
USD 90,000 - 130,000
Software Developer, Data Platform Engineering
Software Developer, Data Platform Engineering

Comcast (CC) of Willow Grove • West Chester

On-site
USD 90,000 - 120,000
Specialist, Security Operations Center-Swing Shift
Specialist, Security Operations Center-Swing Shift

Comcast (CC) of Willow Grove • West Whiteland Township

On-site
USD 65,000 - 80,000