Comcast's Technology, Product & Experience organization works at the intersection of media and technology. Our innovative teams are continually developing and delivering products that transform the customer experience. From creating apps like TVGo to new features such as the Talking Guide on the X1 platform, we work every day to make a positive impact through innovation in the pursuit of building amazing products that are enjoyable, easy to use and accessible across all platforms. The team also develops and supports our evolving network architecture, including next-generation consumer systems and technologies, infrastructure and engineering, network integration and management tools, and technical standards. We offer a flexible working environment to balance the need to work independently wherever you choose, with days that require collaboration at one of our offices. Our roles primarily reside inside or around one of our Tech Hubs (Philadelphia and surrounding suburbs, Denver, Austin, Silicon Valley, Washington DC/N. Virginia). Some roles can work virtual full-time if they are not near a Tech Hub, but that is dependent upon the needs of the position and amount of collaboration required.

Job Summary
The Vulnerability Management Team is looking for a talented engineer that would be accountable for the vulnerability management lifecycle throughout the Comcast organization. Provide subject matter expertise on Patch and Vulnerability Management including leveraging best in class tools and partners for scanning and testing. Responsible for contributing to one or more areas of expertise in collaboration with various cross-functional project teams. Exercises in-depth knowledge of engineering skills and methodology. Applies long-term objectives and plans related to the company's technical vision to daily activity. Applies innovative solutions for engineering developmental problems that are competitive with industry and company standards. Has in-depth experience, knowledge, and skills in own discipline.

Job Description

Our team helps to identify, prioritize, and remediate vulnerabilities across various business units, we are responsible for Vulnerability Management across Comcast. We perform comprehensive vulnerability assessments and continuous monitoring across the organization.

Additionally:

• Manage the entire lifecycle of vulnerabilities from discovery, triage, advising, remediation, and validation
• Work with various business units to perform vulnerability assessments on systems or applications before go-live rollouts
• Triage patch releases and make recommendations on required remediations
• Examine systems and applications to assess the current security posture
• Manage vulnerability related tickets to ensure vulnerabilities are remediated within proper timelines

What you will do:

In this position you will be part of the growing Vulnerability Management program, and will be working with IT and operations teams across the Comcast Cyber Security Operations Center teams to expand our collaboration and enhance the data pipelines for deeper insights to drive remediation plans

• Review and curate vulnerabilities in Comcast products and services

• Provide guidance to Comcast product and service teams to enable remediation
• Validate and drive vulnerability remediation of discovered vulnerabilities
• Autonomously analyze and implement optimal settings and configurations to perform vulnerability scans of networks, operating systems, applications, containers, cloud resources, and other information systems
• Implement automated monitoring and alerting on scanning tools and processes
• Automate Tasks to achieve efficiency

• Provide direct high-level analysis of specific or broad-scope security issues and risks identified by key systems and other sources
• Oversee the risk-ranking process of newly identified vulnerabilities for prioritization and development of remediation plans
• Participate in vulnerability management, threat identification, and/or deep dive research projects as assigned to challenge assumptions
• Articulate true, proven cyber security risk within the company to ensure security protocols are being followed accurately

The experience you bring:

• Advanced knowledge of Server and client operating systems
• Experience with core vulnerability management scanners (e.g Tenable, Rapid7, Qualys, etc.).
• Experience with web application scanners (e.g Tenable, Rapid7, Netsparker, Burp, etc.)
• Ability to sift through large data to prioritize impactful vulnerabilities and reduce noise often associated with vulnerability tools
• Experience working with MAC, Windows, Linux and/or other Unix-like variants

• Thorough understanding of TCP, UDP, HTTP, IP and other network protocols
• Understanding of how to triage vulnerabilities and validate tool findings before reporting them or taking action
• Proactive go getter attitude to solve challenging problems
• Stays up to date with current vulnerabilities and vulnerability related news in various industries
• GoLang, Python, Ruby, Rust, BASH

• Ability to work with big data and write scripts against common web APIs (REST, SOAP)
• Knowledge of cloud platforms, dynamic cloud environments, and cloud security
• You're a clear thinker and efficient communicator (i.e written and verbal)

Employees at all levels are encouraged to:

• Understand our Operating Principles; make them the guidelines for how you do your job.
• Be responsible for the customer experience - think and act in ways that put our customers first, give them detailed digital options at every touchpoint, and make them promoters of our products and services.
• Know your stuff - be hard-working learners, users and advocates of our groundbreaking technology, products and services, especially our digital tools and experiences.
• Win as a team - make big things happen by working together and being open to new insights.
• Be an active part of the Net Promoter System - a way of working that brings more employee and customer feedback into the company - by joining huddles, making call backs and helping us elevate opportunities to do better for our customers.
• Get results and growth.
• Respect and promote inclusion & diversity.
• Do what's right for each other, our customers, investors and our communities.

Disclaimer:

• This information has been crafted to indicate the general nature and level of work performed by employees in this role. It is not crafted to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications.

Comcast is an EOE/Veterans/Disabled/LGBT employer.

We believe that benefits should connect you to the support you need when it matters most, and should help you care for those who matter most. That's why we provide an array of options, expert guidance and always-on tools that are personalized to meet the needs of your reality-to help support you physically, financially and emotionally through the big milestones and in your everyday life.

Please visit the benefits summary on our careers site for more details.

Education
Bachelor's Degree

While possessing the stated degree is preferred, Comcast also may consider applicants who hold some combination of coursework and experience, or who have extensive related professional experience.

Certifications (if applicable)

Relative Work Experience
7-10 Years

Comcast is proud to be an equal opportunity workplace. We will consider all qualified applicants for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other basis protected by applicable law.