AI Cyber Defense Analyst

Company Description

We create world-class content, which we distribute across our portfolio of film, television, and streaming, and bring to life through our theme parks and consumer experiences. We own and operate leading entertainment and news brands, including NBC, NBC News, MSNBC, CNBC, NBC Sports, Telemundo, NBC Local Stations, Bravo, USA Network, and Peacock, our premium ad-supported streaming service. We produce and distribute premier filmed entertainment and programming through Universal Filmed Entertainment Group and Universal Studio Group, and have world-renowned theme parks and attractions through Universal Destinations & Experiences. NBCUniversal is a subsidiary of Comcast Corporation.

Comcast NBCUniversal has announced its intent to create a new publicly traded company ('SpinCo') comprised of most of NBCUniversal's cable television networks, including USA Network, CNBC, MSNBC, Oxygen, E!, SYFY and Golf Channel along with complementary digital assets Fandango, Rotten Tomatoes, GolfNow, GolfPass, and SportsEngine. The well-capitalized company will have significant scale as a pure-play set of assets anchored by leading news, sports and entertainment content. The spin-off is expected to be completed during 2025.

As a company uniquely positioned to educate, entertain and empower through our platforms, Comcast NBCUniversal stands for including everyone. Our Diversity, Equity and Inclusion initiatives, coupled with our Corporate Social Responsibility work, is informed by our employees, audiences, park guests and the communities in which we live. We strive to foster a diverse, equitable and inclusive culture where our employees feel supported, embraced and heard. Together, we'll continue to create and deliver content that reflects the current and ever-changing face of the world.

Job Description

The AI Cyber Defense Analyst is responsible for developing and monitoring Artificial Intelligence-related detections and alerts, escalating as necessary, and working with the incident response team as the AI monitoring subject matter expert.

Responsibilities:

• Maintain and analyze threat intelligence feeds to identify emerging AI/ML threats, vulnerabilities, and attack techniques.
• Proactively search for malicious activity within AI systems and their supporting infrastructure.
• Conduct in-depth investigations into suspicious AI-related events.
• Monitor AI/ML models for anomalies, drift, and unexpected behavior.
• Develop and implement AI/ML-based detection models to identify sophisticated attacks.
• Continuously monitor AI systems and their supporting infrastructure for security threats, misuse, and abuse.
• Respond to AI-related security incidents in a timely and effective manner.
• Collaborate with the incident response team to investigate and contain security breaches.
• Act as the subject matter expert for AI security during incident response activities.
• Identify gaps in AI security controls and recommend improvements.
• Document and share best practices for securing AI systems.
• Develop use cases for AI/ML in cybersecurity, such as threat hunting and incident response.
• Establish and maintain baselines for AI system behavior; identify and investigate any deviations from established baselines.
• Identify and address potential security concerns related to the development, deployment, and operation of AI systems.
• Provide guidance and recommendations to developers and other stakeholders on how to secure AI systems.

Qualifications

Basic Requirements:

• 3+ years of experience in cybersecurity, with a strong focus on threat hunting, incident response, or security engineering.
• Strong understanding of AI/ML concepts, including machine learning algorithms, deep learning, and natural language processing.
• Experience with AI/ML security tools and techniques, such as model poisoning detection, adversarial robustness testing, and explainable AI.
• Experience with security information and event management (SIEM) systems, security orchestration, automation, and response (SOAR) platforms, and endpoint detection and response (EDR) solutions.  
• Strong analytical and problem-solving skills, with the ability to think critically and creatively.
• Excellent communication and interpersonal skills, with the ability to effectively communicate technical information to both technical and non-technical audiences.
• Experience with scripting languages (e.g., Python, PowerShell) and data analysis tools.
• Knowledge of cloud computing platforms (e.g., AWS, Azure, GCP) and cloud security best practices.
• Experience with incident response methodologies and best pr