Comcast Cybersecurity: Sr Manager, Detection & Orchestration

Make your mark at Comcast -- a Fortune 30 global media and technology company. From the connectivity and platforms we provide, to the content and experiences we create, we reach hundreds of millions of customers, viewers, and guests worldwide. Become part of our award-winning technology team that turns big ideas into cutting-edge products, platforms, and solutions that our customers love. We create space to innovate, and we recognize, reward, and invest in your ideas, while ensuring you can proudly bring your authentic self to the workplace. Join us. You’ll do the best work of your career right here at Comcast. (In most cases, Comcast prefers to have employees on-site collaborating unless the team has been designated as virtual due to the nature of their work. If a position is listed with both office locations and virtual offerings, Comcast may be willing to consider candidates who live greater than 100 miles from the office for the remote option.)

Job Summary

Responsible for managing the daily and overall work processes and practical implementation of cyber engineering and technical standards within one or more assigned areas of the Cyber Security. Monitors assigned areas of Cyber Operations to ensure technical adherence to industry and company standards. Ensures all work processes are efficient and consistent in their daily application. Identifies flaws in the work process and enacts solutions. Manages the efficient service of all technical equipment used. Coordinates complex and multi-disciplined cyber security projects from design to implementation in accordance with the company's policies. Develops financial and operational objectives. Ensures that enterprise-wide operational plans are aligned with business objectives. Responsible for monitoring, identifying, investigating and analyzing all response activities related to cybersecurity incidents within an organization. Identifies security flaws and vulnerabilities; responds to cybersecurity incidents, conducts threat analysis as directed and addresses detected incidents. Conducts network or software vulnerability assessments and penetration testing utilizing reverse engineering techniques. Perform vulnerability analysis and exploitation of applications, operating systems or networks. Identifies intrusion or incident path and method. Isolates, blocks or removes threat access. Evaluates system security configurations. Evaluates findings and performs root cause analysis. Performs analysis of complex software systems to determine both functionality and intent of software systems. Resolves highly complex malware and intrusion issues. Contributes to the design, development and implementation of countermeasures, system integration, and tools specific to Cyber and Information Operations. Develops financial and operational objectives. Ensures operational plans are aligned with business objectives. Contributes to functional strategy development. Has a greater degree of impact on business results, and typically manages one or more groups of professional employees.

Job Description

Responsibilities

• Lead daily operations of the Threat Detection Engineering and the Security Operations Orchestration/Automation programs.
• Provide thought leadership for program improvements and new initiatives.
• Recommend and produce key metrics, KPIs, and reporting.
• Coach and mentor a technical team of engineers - including all HR and career development needed.
• Provide oversight and technical review of draft work product prior to finalization.
• Lead roadmap development and stay current & suggest enhancements in program capabilities.
• Track status and completion of all team projects.
• Lead team huddles and cross department meetings with response orgs and other key stakeholders.
• Handle escalations from team members as required.

Required Experience:

• 10+ years experience in Cyber Security, of which at least 5 or more should be in a Cyber Security Operations Discipline
• At least 3 years leading or managing an engineering team.
• Demonstrated expertise in core threat detection technologies (e.g. EDR, UTM, SIEM) and orchestration technologies (e.g. SOAR)
• Experience engineering/developing detection and orchestration solutions.
• Experience creating and producing metrics and KPIs for core security programs.
• Excellent written and verbal communications skills.
• Ability to influence teams not within direct areas of responsibility.
• Knowledge of Agile/Kanban processes

Nice to have experience:

• Experience leading or participating in incident response.
• Expertise with big data software such as Data Bricks, Snowflake, etc.
• Knowledge of major cloud platforms and logging
• Experience in multiple platform vendor technologies.
• Relevant industry technical cert