Sr. Cyber Infrastructure Engineer

Company Description

NBCUniversal is one of the world's leading media and entertainment companies. We create world-class content, which we distribute across our portfolio of film, television, and streaming, and bring to life through our theme parks and consumer experiences. We own and operate leading entertainment and news brands, including NBC, NBC News, MSNBC, CNBC, NBC Sports, Telemundo, NBC Local Stations, Bravo, USA Network, and Peacock, our premium ad-supported streaming service. We produce and distribute premier filmed entertainment and programming through Universal Filmed Entertainment Group and Universal Studio Group, and have world-renowned theme parks and attractions through Universal Destinations & Experiences. NBCUniversal is a subsidiary of Comcast Corporation.

Our impact is rooted in improving the communities where our employees, customers, and audiences live and work. We have a rich tradition of giving back and ensuring our employees have the opportunity to serve their communities. We champion an inclusive culture and strive to attract and develop a talented workforce to create and deliver a wide range of content reflecting our world.

Comcast NBCUniversal has announced its intent to create a new publicly traded company ('Versant') comprised of most of NBCUniversal's cable television networks, including USA Network, CNBC, MSNBC, Oxygen, E!, SYFY and Golf Channel along with complementary digital assets Fandango, Rotten Tomatoes, GolfNow, GolfPass, and SportsEngine. The well-capitalized company will have significant scale as a pure-play set of assets anchored by leading news, sports and entertainment content. The spin-off is expected to be completed during 2025.

Job Description

As a senior technical leader within the Versant Cyber Defense Infrastructure organization, you will be at the forefront of safeguarding the company’s digital assets. This is a pivotal, hands-on role where you will architect, build, and run the critical security platforms that defend our web applications and secure the software development lifecycle. You will have the strategic autonomy to shape our technical roadmap, directly protecting the integrity of world-renowned brands and enabling the business to innovate securely. The ideal candidate is a subject matter expert who thrives on solving complex challenges, mentoring talented engineers, and proactively evolving our security posture against emerging threats, and excels at managing strategic partnerships, including the oversight of our Managed Security Service Provider (MSSP).

Responsibilities:

Key areas of focus for the Senior Cyber Infrastructure Engineer include security architecture, platform ownership, operational excellence, and mentorship. The successful candidate will be responsible for the following activities:

• Lead the design, implementation, and administration of core application security systems, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and cloud-native security tools like Snyk and Wiz.
• Own the strategy and daily operations for application protection platforms, such as web application firewalls (WAFs), Palo Alto firewalls, and bot mitigation services.
• Serve as a primary technical escalation point for complex security issues, providing expert guidance to internal engineering and development teams.
• Act as the primary technical liaison for our Managed Security Service Provider (MSSP), overseeing daily operations, managing technical escalations, and ensuring service delivery aligns with Versant’s security standards. You will be accountable for driving partner productivity, tracking performance against SLAs, and integrating their services into our security workflows.
• Architect and implement resilient, scalable, and automated security solutions across a global, 24x7 enterprise.
• Identify opportunities for and lead the development of automation to improve security workflows and reduce manual tasks.
• Contribute to the long-term strategic roadmap for cyber defense infrastructure by evaluating emerging threats, new technologies, and the application of AI/ML for advanced threat detection.
• Develop and maintain key performance indicators (KPIs) to measure the effectiveness of security controls and report on posture to leadership.
• The Infrastructure Engineering Team is an MSSP and will be responsible
• Mentor junior engineers, foster a strong security culture, and advocate for security best practices across the organization.

Qualifications

• Minimum 5-7 years of experience in a hands-on cybersecurity engineering role.
• Demonstrated expertise in software and application security principles, including secure coding practices, vulnerability management, and Dev