Top Cybersecurity Jobs

Design, implement, and resolve complex SOC security operations issues. Build automation scripts and internal web applications, integrate and troubleshoot security tools via APIs, mentor junior staff, evaluate new security technologies, refine SOC processes and runbooks, and apply data analysis to improve operations and alert handling.

Leads Comcast’s enterprise Identity and Access Management engineering and operations strategy. Manages a team of employees and contractors while overseeing the myComcastAccess platform, SailPoint IdentityIQ, Radiant Logic, identity governance, provisioning, certifications, lifecycle management, and application onboarding. Drives modernization, cloud identity, automation, APIs, DevOps, service reliability, compliance, escalations, and continuous improvement. Partners with executives and cross-functional teams, presents roadmaps, and ensures scalable, secure identity solutions and operational readiness, including variable schedules when required.

Performs quarterly technology and cybersecurity internal audits across physical, network, application, system, and data environments. Plans engagements, evaluates controls and risks against policies, security frameworks, COBIT, and legal requirements, tests controls, documents work papers, identifies findings, and recommends remediation. Conducts data analysis, communicates conclusions to management, supports audit methodology improvements, and mentors less experienced team members. Requires independent judgment, collaboration, occasional travel, and flexibility for extended hours, nights, and weekends.

Leads the design, implementation, and expansion of enterprise identity and access management solutions. Designs Okta architecture, integrates applications using authentication protocols, configures access policies, validates access flows, and supports hybrid cloud environments. Conducts security assessments, troubleshoots IAM systems, develops strategy and roadmaps, documents requirements, evaluates vendors, and collaborates with cybersecurity, application development, risk, and business teams.

Build secure, scalable platforms and automation for cybersecurity operations, including threat hunting, incident response, PSIRT, product security, vulnerability management, and analyst workflows. Develop LLM-powered agents, integrate SIEM, SOAR, cloud, endpoint, ticketing, and scanning systems, and process high-volume security telemetry. Partner with security teams to automate investigations, enrich alerts, prioritize risks, track remediation, and deliver reliable production services.

Supports and maintains Okta and related identity and access management platforms. Troubleshoots authentication, SSO, MFA, federation, provisioning, and application access issues; onboards enterprise applications; manages roles and entitlements; investigates incidents; analyzes logs; maintains integrations and operational documentation; and contributes to automation and continuous improvement. Collaborates with cybersecurity, infrastructure, application, and vendor teams, participates in Agile ceremonies, and may provide after-hours support.

Configure and secure Workday HCM, manage user provisioning and access, process security-related business process corrections, and support UAT, regression, integration, and report testing. Collaborate on SOX, privacy, and security audits; review access procedures and controls; and work with quality assurance teams to validate application requirements. The role also involves process redesign, project management, documentation, and occasional variable scheduling, nights, weekends, and overtime.

Design and implement IAM and AAA architectures, integrate authentication technologies, automate IAM workflows (including Agentic AI), develop security automation and full-stack solutions, perform security assessments and incident response, and provide technical guidance across engineering and cybersecurity teams.

Design and execute threat-informed adversary emulation scenarios, validate detection coverage across telemetry sources, generate high-fidelity data for threat hunting, automate emulation workflows, identify logging and detection gaps, and convert findings into detections, hunt content, and actionable remediation across enterprise teams.