Development Engineer 4 - Security Operations Job in Comcast

The Sr. Endpoint Security Engineer Position is responsible for engineering, development, monitoring, andmaintenance of Security Endpoint tools focusing on anti-virus, malware detection, and mail filtering solutions that support 140K enterprise users and 50K servers in national data centre and regional locations.

The Sr.Engineer acts as a key contributor in a complex and crucial environment.

Passionate about endpoint security including endpoint protection, zero day threats, advanced persistent threats, data loss prevention, and compliance.

Drives security issues through to closure engaging all appropriate resources. Leads technical bridges and provides troubleshooting direction. Provides guidance and recommended solutions to complex technical issues.

Responsible for maintaining and building relationships with stakeholders to minimise the risks to Comcast.

Implement and customize antivirus policies and email filtering rules.

Analyzes system behavior and logs to track potential malware back to its origin.

Performs complex and routine maintenance updates for endpoint security products.

Maintains product release process and testing including back out plans. Validates all maintenance is properly validated to minimize subscriber impact.

Provides input to support teams and vendors on defects and required enhancements.

Identifies and recommends areas requiring change or modification.

May need to some work nights and weekends for on-call and system maintenance windows.

Required Skills/Experience:

8+ years' experience with Enterprise Endpoint Security.

Experience with Endpoint Protection suites like CrowdStrike Falcon.

Understanding of file hashes, file reputation analysis, and file blacklisting.

Strong background with Windows operating systems and Unix based systems.

Security subject knowledge and experience in malware, IDS, encryption and security policy.

Great design and problem-solving skills.

Adaptable, proactive and driven to take ownership.

Keen attention to detail and high level of commitment.

Knowledge of PCI and SOX requirement.

Effective Communication, including verbal, report writing & presentations skills in English.

Preferred Skills:

Linux command line and scripting experience in Python, Javascript, SQL (Presto) and Bash.

Database experience MySQL and SQLite

Linux/Unix platform development on an enterprise scale. Server administration and platform maintenance.

Familiarity with modern methods of network and endpoint attacks and compromise such as MITRE ATT&CK techniques.

Knowledge of regulatory compliance configuration and reporting.

Log correlation and/or SIEM platform experience such as Splunk.

Familiarity with open source endpoint security technologies such as osquery.