Comcast Cybersecurity: Security Research Engineer

Make your mark at Comcast -- a Fortune 30 global media and technology company. From the connectivity and platforms we provide, to the content and experiences we create, we reach hundreds of millions of customers, viewers, and guests worldwide. Become part of our award-winning technology team that turns big ideas into cutting-edge products, platforms, and solutions that our customers love. We create space to innovate, and we recognize, reward, and invest in your ideas, while ensuring you can proudly bring your authentic self to the workplace. Join us. You’ll do the best work of your career right here at Comcast. (In most cases, Comcast prefers to have employees on-site collaborating unless the team has been designated as virtual due to the nature of their work. If a position is listed with both office locations and virtual offerings, Comcast may be willing to consider candidates who live greater than 100 miles from the office for the remote option.)

Job Summary

We are hiring a security-focused researcher with a deep background in Internet measurement to develop a cryptographic inventory and visibility solution using enterprise network telemetry and Internet measurement techniques. This role combines expertise in network protocols, cryptographic standards, and telemetry analysis to build tools that provide actionable insights into cryptographic usage across enterprise, cloud, and Internet-scale environments. This role will sit with the newly created Post-Quantum Cryptography Center of Excellence within the Comcast Cyber Security (CCS) team.

Job Description

Core Responsibilities 

• Design and implement a system to inventory cryptographic usage (e.g., TLS versions, cipher suites, key exchange methods) using telemetry from diverse sources such as firewalls, endpoint agents, packet captures, and flow logs. 

• Analyze network traffic and metadata to extract cryptographic protocol details and assess hygiene, compliance, and risk posture. 

• Design scalable custom scans and build associated data pipelines to complement existing telemetry for measuring protocol deployment and cryptographic use. 

• Collaborate with internal teams and external partners to validate findings, publish research, and contribute to open-source tools. 

• Stay current with evolving standards in cryptography (e.g., TLS 1.3, post-quantum crypto) and Internet protocols. 

 

Minimum Qualifications:  

• Bachelor's degree in Computer Science, Network Security, or similar technical field with 5 years of professional experience OR equivalent.

• Experience in Internet measurement, network security, or telemetry-based research. 

• Experience working with telemetry sources such as Zeek, firewall logs, NetFlow/sFlow, endpoint telemetry platforms (e.g., Uptycs, CrowdStrike), or packet capture tools. 

• Familiarity with network protocols like TLS, X.509, BGP, DHCP, IPsec, DNSsec, etc. 

• Working knowledge of Python and SQL.  

• Basic knowledge of cryptographic algorithms (RSA, ECC, AES) and digital signatures.  

• Ability to learn and work independently, along with strong communication, and a strong work ethic. 

Preferred Qualifications:  

• PhD in Computer Science, Network Security, or similar technical field. 

• Contributions to open-source security or measurement tools.