Sr. Cybersecurity Engineer

Make your mark at Comcast -- a Fortune 30 global media and technology company. From the connectivity and platforms we provide, to the content and experiences we create, we reach hundreds of millions of customers, viewers, and guests worldwide. Become part of our award-winning technology team that turns big ideas into cutting-edge products, platforms, and solutions that our customers love. We create space to innovate, and we recognize, reward, and invest in your ideas, while ensuring you can proudly bring your authentic self to the workplace. Join us. You’ll do the best work of your career right here at Comcast. (In most cases, Comcast prefers to have employees on-site collaborating unless the team has been designated as virtual due to the nature of their work. If a position is listed with both office locations and virtual offerings, Comcast may be willing to consider candidates who live greater than 100 miles from the office for the remote option.)

Job Summary

As a Senior Cybersecurity Engineer, you'll play a critical role in securing
applications and network platforms in Comcast's Technology Product organization. This role combines hands-on security engineering with software development, requiring expertise in cloud security, secure development practices, and automation. You'll design and implement security controls, develop security tooling, and mentor teams. This position offers the opportunity to make measurable impact on security posture while collaborating with cross-functional teams in a dynamic, innovation-driven culture.

Job Description

Comcast’s Technology + Product (T+P) organization works at the intersection of media and technology. Our innovative teams are continually developing and delivering products that transform the customer experience.

About the Team:

The CONNECT Cybersecurity & Privacy team is at the forefront of strengthening the security posture of one of Comcast’s most dynamic organizations. We continuously measure and elevate CONNECT’s cybersecurity maturity using automated scan data, targeted assessments, and deep partnership with engineering teams. Our mission goes beyond identifying risks—we empower teams with actionable guidance, ensure alignment to expected security controls, and collaborate closely with Comcast Cybersecurity to enable secure, scalable, and innovative solutions. Team members gain the unique opportunity to influence security strategy across a broad and evolving technology landscape, drive measurable improvements in vulnerability remediation, and play a critical role in protecting a major enterprise at scale. If you’re passionate about proactive security, data‑driven insights, and making a tangible impact, this team offers an exciting, high‑visibility environment to grow and accomplish meaningful work.

Key Responsibilities:

• Designs and implements cybersecurity controls for Secure Development Lifecycle (SDL), cloud infrastructure, and vulnerability management programs
• Develops and maintain security automation tools, scripts, and integrations using Python, SQL, and cloud-native services
• Conducts secure code reviews in GitHub repositories and assess third-party applications for security vulnerabilities
• Provides technical remediation guidance and security architecture consultation to development teams
• Builds and operates security monitoring solutions with KPIs to measure program effectiveness
• Collaborates with DevOps teams on Infrastructure as Code (IaC) security using Terraform and AWS security services
• Mentors team members on security best practices and emerging threats
• Drives security initiatives to completion while balancing scope, timeline, and resource constraints
• Communicates security risks and technical findings to both technical and executive audiences
• Develops and maintains KPIs relating to security initiatives
• Ensures program milestones are accomplished and ensures overall committed timelines are met

Desired Skills & Experience (7+ years)

• 5–7+ years of experience in cybersecurity engineering or a closely related discipline
• Strong critical thinking and analytical problem‑solving skills
• Expertise in security-focused code reviews
• Proficiency in threat modeling and identifying potential vulnerabilities
• Hands‑on software development experience, with Python and SQL strongly preferred
• Background working in DevOps environments, including CI/CD pipelines using GitHub Actions or Concourse
• Practical experience with Terraform and Ansible
• Solid understanding of Linux/Windows system administration and modern container platforms such as Docker and Kubernetes

About Our Perks & Benefits:

We are d