Comcast Cybersecurity: Remediation Engineer 3

Make your mark at Comcast -- a Fortune 30 global media and technology company. From the connectivity and platforms we provide, to the content and experiences we create, we reach hundreds of millions of customers, viewers, and guests worldwide. Become part of our award-winning technology team that turns big ideas into cutting-edge products, platforms, and solutions that our customers love. We create space to innovate, and we recognize, reward, and invest in your ideas, while ensuring you can proudly bring your authentic self to the workplace. Join us. You’ll do the best work of your career right here at Comcast. (In most cases, Comcast prefers to have employees on-site collaborating unless the team has been designated as virtual due to the nature of their work. If a position is listed with both office locations and virtual offerings, Comcast may be willing to consider candidates who live greater than 100 miles from the office for the remote option.)

Job Summary

We are seeking a motivated Vulnerability Remediation Engineer 3 to join our Cybersecurity team. In this vital role, you will contribute to the remediation of vulnerabilities identified through our penetration testing operations. Your expertise in developing and implementing remediation strategies will be crucial in mitigating security risks. Join us and play a key role in strengthening our security posture.

Job Description

What you will do 

• Partner with developers to provide guidance on the remediation of vulnerabilities that are in line with Comcast policies, procedures and industries best practices.  

• Validate remediation efforts from internal customers (developers, etc.) 

• Collaborate with peers across Comcast to review and curate security vulnerabilities 

• Collaborate with the pen testing team on Continues Penetration Testing (CPT) efforts and various pen testing exercises 

• Assist in organization wide vulnerability burn down activities  

• Other duties as assigned  

 

What you should possess 

• Bachelor's Degree in Information Technology, Information Security, Computer Science, or equivalent experience. 

• Understanding of Vulnerability scanning and penetration testing 

• Strong understanding of common vulnerabilities and exposure (CVE) database and vulnerability scoring systems (CVSS) 

• Familiarity with industry standard vulnerabilities categories such as the OWASP Top 10 and the Bugcrowd’s Vulnerability Rating Taxonomy 

• Exposure to both commercial and open-source tools such as Burpsuite, Metasploit, WebInspect, Nessus, Qualys, Nexpose, and nmap. 

• Strong customer focus with the ability to advise and work closely with application teams and vendors on mitigation. 

• Understanding of various operating systems, applications, network infrastructures, programming languages 

• Excellent analytical and problem-solving skills, with a keen attention to detail 

• Some experience in scripting and automation to aid in streamlining remediation processes 

• Excellent collaboration and communication skills, with the capability to work well across different teams and organizational levels 

• Proactive can-do attitude 

  

What success looks like 

• Prompt, effective curation of security vulnerabilities 

• Responsiveness to internal customer’s requests 

• Validation of remediated ticke