Comcast Cybersecurity: Security Engineer, Managed Services

Comcast Business offers a suite of Connectivity, Communications, Networking, Cybersecurity, Wireless, and Managed Solutions to help global organizations of all sizes prepare for what’s next. Powered by the nation’s largest Gig-speed broadband network and backed by 24/7 customer support, Comcast Business is the nation’s largest technology provider to small businesses and one of the leading service providers to the Enterprise market. Comcast Business has been consistently recognized by industry analysts and associations as a leader and innovator, and one of the fastest growing providers of Ethernet services.

Job Summary

This role supports the Comcast Business Enterprise Solutions teams and the
PCI-as-a-Service delivery to customers. Responsible for incorporating
operational and compliance monitoring of security controls and policies, review
of security logs, reconciling security events, escalation of security violations or
lack of timely remediation, risk assessment and risk management principles.
Implements strategies and maintains subject matter expertise on industry best
practices, particularly PCI. Ensures continuous measurement and communication of required metrics. Integrates knowledge of business and functional priorities.

Job Description

Must Have Skills:

• Hands-on experience with the remediation of security vulnerabilities
• Excellent written and verbal communication skills
• High level of attention to detail when working with various data formats, ensuring data integrity throughout the process.
• Ability to consume large amounts of data in various forms and have proficiency in data collection, processing, and analysis using tools such as Excel, custom tools, and other data analytics platforms.
• Ability to analyze large data sets for trends, inconsistencies and insights, and translating them into actionable recommendations.
• Excellent problem-solving and troubleshooting skills, including experience diagnosing, troubleshooting, and resolving issues efficiently (e.g. performing/tracking RCAs and identifying/ resolving bottlenecks.
• Expertise in advanced Excel functionalities (e.g., VLOOKUPs, Pivots, complex formulas) and the ability to write scripts (e.g., Python, VB) to automate repetitive tasks is a plus
• Organizational skills to manage status, documentation and updates across various stakeholders
• Must take PCI DSS certification within first 6 months of employment. Familiarity with other security/industry standards (e.g., NIST, CVSSv3, OWASP etc.)

Core Responsibilities

• Manage day to day operations and service level agreements from the 3rd party security vendor to meet customer obligations.  
• Coordinate the deployment of agents within client environment and work with client and 3rd party security vendor to configure the agent for monitoring of sensitive files and folders and ensure centralized reporting.  
• Ensure continuous compliance of controls (e.g. agents continue to report-in, device log health, etc.)  
• Review daily log file reports from 3rd party security vendor and highlight potential errors or anomalies. Investigate and escalate issues to relevant information security, technology, operations team within Comcast for Comcast managed devices, or escalate to client for devices outside of Comcast managed services scope.  
• Review or conduct internal vulnerability scans for new rogue devices or failed scans. Escalate to relevant information security, technology, operations team within Comcast for Comcast managed devices, or escalate to client for devices outside of Comcast managed services scope. Launch or work with 3rd party security vendor to launch maintenance scans to ensure passing scans.  Summarize status, findings and trends to internal and external leadership.    
• Review monthly external monthly vulnerability scans. Escalate to relevant information security, technology, operations team within Comcast for Comcast managed devices, or escalate to client for devices outside of Comcast managed services scope. Launch or work with 3rd party security vendor to launch maintenance scans to ensure passing scans.  Summarize status, findings and trends to internal and external leadership.    
• Coordinate annual internal and external penetration tests with client and 3rd party security vendor. Escalate to relevant information security, technology, operations team within Comcast for Comcast managed devices, or escalate to client for devices outside of Comcast managed services scope. Launch or work with 3rd party security vendor to launch maintenance scans to ensure passing scans.  Summarize status, findings and trends to internal and external leadership.   
• Work directly with customers to understand and re