Engineer 4 - Security Operation Job in Comcast

Remediation Engineer 4

In This Role

You will enforce security policies and procedures by assisting users with remediation tasks.

What you will do

• Review and curate security vulnerability ticketing.
• Assist users by providing security guidance for remediation of Vulnerabilities.
• Validate remediation efforts from internal customers.
• Investigate possible security exceptions.
• Update, maintain and document security controls.

What you should possess

• Strong customer focus with the ability to advise and work closely with application teams and vendors on mitigation.
• Exposure to both commercial and open source tools such as Burpsuite, Metasploit, WebInspect, Nessus, Qualys, Nexpose, nmap, Kali Linux etc.
• Experience cataloging and risk scoring vulnerabilities discovered through assessments.
• Good understanding and experience with:
  • Vulnerability scanning and penetration testing.
  • Web application security assessment including hands on techniques for identifying SQL. injections, XSS, CSRF, authentication/authorization issues.
  • Scripting with capability to automate analysis of technical engineering tasks.
  • CVE reporting, CVSS scoring and its use in risk rating.
• Basic experience with Linux and a dynamic programming language such as Ruby and/or Python

What success looks like

• Prompt, effective curation of security vulnerabilities.
• Responsiveness to internal customers requests.
• Validation of remediated tickets within published service level agreements (SLAs).

What You Can Expect

• A cool and casual work environment with opportunities to showcase your skills.
• A culture of innovation and continuous learning.
• Training, support, and mentoring to expand and evolve your expertise.
• Opportunities to impact the security of Comcast products in millions of homes and businesses.

What We Require

• Bachelor's Degree in Computer Science, Information Systems, or other related field or equivalent work experience.
• 8-12 years of combined IT and security work experience with a broad range of exposure to systems analysis, application development, database design and administration;
• Minimum 5 years of information security experience.