Job Summary
To protect Comcast’s vast ecosystem, we have to move faster than automated threats. We are seeking a Software Engineer to design and build intelligent platforms, automation systems, and data-driven workflows that enable the Cybersecurity Operations Center and partner security teams to operate at scale.
This role supports critical security operations functions including threat hunting, incident response, PSIRT, product security, vulnerability risk management, and analyst workflow automation. You will build tools that help security teams detect suspicious activity, triage operational signals, correlate security data, automate repeatable actions, and surface timely context to analysts and responders.
This is a hands-on engineering role at the intersection of software development, security operations, data engineering, and applied AI. The ideal candidate is a strong software engineer with a passion for building scalable systems and solving complex security operational problems. You should be comfortable designing distributed systems, developing automation workflows, integrating security platforms, and working across both front-end and back-end technologies.
This role requires a strong foundation in data structures, system design, and large-scale data processing, along with the ability to analyze and correlate high-volume security telemetry, incident data, asset context, product security findings, and operational signals.
Job Description
Responsibilities:
Design, develop, and maintain internal platforms and services that support CSOC operations, threat hunting, incident response, PSIRT intake, product security workflows, risk prioritization, and analyst automation.
Build automation that reduces analyst toil across alert triage, investigation enrichment, evidence collection, case management, ticketing, notifications, reporting, and operational handoffs.
Develop LLM-powered agents and AI-assisted workflows that summarize security events, enrich investigations, automate repetitive triage steps, and surface relevant context to analysts, hunters, responders, and product security teams.
Build integrations across security telemetry, SIEM, SOAR, ticketing, source control, scanning, cloud, endpoint, and notification systems.
Apply strong data structures and algorithms to process and correlate large volumes of security data, including alerts, incidents, assets, dependency graphs, source repositories, detections, and operational metadata.
Partner with threat hunters and incident responders to turn repeatable investigative techniques into durable detection, enrichment, and automation capabilities.
Support PSIRT and product security operations by building workflows for intake, triage, prioritization, remediation tracking, and executive-ready reporting.
Design secure, observable, and maintainable services that can operate reliably in security-sensitive production environments.
Write well-tested code, participate in code reviews, and uphold engineering best practices for systems that support high-pressure security operations.
Familiarity with SIEM, SOAR, EDR, case management, security data lake, or security operations platforms.
Familiarity with Databricks, Snowflake, Spark, or similar large-scale data processing platforms.
Experience with one or more cloud platforms such as AWS, GCP, or Azure.
Experience building analyst-facing tools, dashboards, automation frameworks, or internal platforms.
Familiarity with OpenAI SDK, LangChain, LangGraph, agentic workflows, retrieval-augmented generation, or AI-assisted security operations.
Familiarity with OWASP Top 10, secure coding practices, software supply chain security, dependency risk, or application security concepts.
Experience translating manual security workflows into scalable software, automation, or data products.
Disclaimer: This information has been designed to indicate the general nature and level of work performed by employees in this role. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications.
Skills
Cloud Engineering, Large Language Models (LLMs), Machine Learning Model Management, Secure Coding Practices, Security Automation, Security Operations
We believe that benefits should connect you to the support you need when it matters most, and should help you care for those who matter most. That's why we provide an array of options, expert guidance and always-on tools that are personalized to meet the needs of your reality—to help support you physically, financially and emotionally through the big milestones and in your everyday life.
Please visit the on our careers site for more details.
Education
Bachelor's Degree
While possessing the stated degree is preferred, Comcast also may consider applicants who hold some combination of coursework and experience, or who have extensive related professional experience.
Certifications (if applicable)
Relevant Work Experience
5-7 Years
