Engineer 1 - Security Operations Job in Comcast

Hardware Security Assessor

Do you naturally consider how technology might be bypassed, modified, defeated or used in an unexpected way?

Do you fan out or participate in hackaday and love to read about and tinker with hardware and gadgets?

Are you passionate about security and driven to stay current with evolving security issues?

Are you a tenacious problem solver who can work effectively both individually and within a team?

Do you thrive in a setting with smart people and challenging problems?

If yes, we want to hear from you!

In this role

You will perform hardware-based security assessments for broadband, video, IoT, smart devices and building systems using both black box and white box testing approaches. You will work autonomously and interact directly with customers to conduct assessments, analyze results, and develop remediation strategies.

What you will do

• Perform hardware security testing and firmware analysis
• Reverse engineer hardware and firmware
• Analyze attack chains and recommend efficient methods for mitigation
• Validate remediations through hands-on testing
• Help advance the goal of building-in security to all Comcast products

What you should possess

• Ability to identify hardware components in embedded devices and read datasheets
• Understanding of embedded device designs and PCBs employing SBCs, SiPs, SoMs, CoMs, and SoCs
• Skills with electronics bench tools, e.g. soldering irons, SOIC clips, multimeter, bus analyzers, scopes
• Familiarity with testing techniques and tools, including identifying attack surfaces of interest for firmware interfaces and functions including fuzzing, disassembling, and reverse-engineering
• Knowledge of RF protocols for network and device interfaces (e.g.: WiFi, Zigbee, BLE, Z-Wave)
• Knowledge of serial protocols and interfaces (e.g. UART, SPI, USB, RS232)
• Knowledge of common errors in programming, crypto, and network/service configurations
• Understanding of common network and application protocols and concepts: IPv4/v6, DHCP, ARP, subnetting/routing, NAT, QoS
• Understanding of embedded software, middleware, and application architectures
• Able to understand and explain vulnerabilities listed in CVE databases and the OWASP top 10
• Passion for cybersecurity, an entrepreneurial spirit, persistence, and resourcefulness

What you can expect

• A cool and casual work environment with chances to showcase your skills
• A team-centric culture of collaboration, innovation, and continuous learning
• Training, support, and mentoring to expand and evolve your expertise
• Opportunity to impact the security of Comcast products in millions of homes and businesses

What we require

• 2-5 years of related experience either on the job or in demonstrable projects