Comcast Cybersecurity: Product Security Engineer 3

Make your mark at Comcast a Fortune 30 global media and technology company. From the connectivity and platforms we provide, to the content and experiences we create, we reach hundreds of millions of customers, viewers, and guests worldwide. Become part of our award-winning technology team that turns big ideas into cutting-edge products, platforms, and solutions that our customers love. We create space to innovate, and we recognize, reward, and invest in your ideas, while ensuring you can proudly bring your authentic self to the workplace. Join us. You’ll do the best work of your career right here at Comcast. (In most cases, Comcast prefers to have employees on-site collaborating unless the team has been designated as virtual due to the nature of their work. If a position is listed with both office locations and virtual offerings, Comcast may be willing to consider candidates who live greater than 100 miles from the office for the remote option.)Job SummaryThe Product Security Engineer is primarily responsible for researching, validating, and documenting the lifecycle of reported vulnerabilities in Comcast's products. Additionally, the Product Security Engineer will assess the overall security maturity and systems architecture of products to launch bug bounty programs. Through these programs the engineer will leverage the researcher community in identifying potential vulnerabilities. Finally, the Product Security Engineer will stay current on the latest cybersecurity threats and security research methods to stay ahead of the curve in vulnerability detection.Job DescriptionCore Responsibilities:

Validate, research, prioritize, and escalate reported vulnerabilities as appropriate.

Manage each reported vulnerability and the communications of its status with internal and external parties until resolution.

Manage a queue of reported vulnerabilities to ensure findings are promptly addressed, catalogued, and internally distributed to appropriate internal stakeholders.

Partner with other teams in the security organization to build and test remediation strategies.

Attend technical calls with internal or external parties regarding reported vulnerabilities.

Document all information including the mitigation and remediation of reported vulnerabilities.

Collaborate with internal teams to map the systems architecture of a product and define the scope of systems to be included as targets for bug bounty programs.

Communicate effectively with external security researchers on behalf of Comcast.

Identify trends in security research methods and develop tools for proactive vulnerability detection

Identify gaps within existing internal security practices and propose enhancements where necessary.

Must-Have Skill

Technical background, Linux, Kali, Burpsuite, Owasp Top 10, projects in security

Experience with the management and remediation of vulnerabilities.

Experience in developing and utilizing various security tools focused on discovering vulnerabilities within networks and applications.

Knowledge of product and software development lifecycles.

Familiarity with responsible disclosure practices.

Possession of excellent oral and written communication skills, including communicating effectively under normal and stressful situations.

Ability to convey technical concepts relating to vulnerability details to a non-technical audience.

Knowledge of a wide range of networking concepts, analysis tools, operating systems, software, and security controls.

Experience with software development methodologies and the software used within large/agile environments including source code version control

Experience with numerous methods of penetration testing and/or systems auditing tools and practices.

Broad knowledge of systems administration (nix/Windows), network engineering, and security engineering.

Qualifications

Bachelor's degree in Computer Science

3- 5 years experience in management and remediation of vulnerabilities

Nice to HaveCertifiications: OSCP, PNPT, eJPT About Our Perks & Benefits:We are determined to create an environment where our employees feel valued, understand our business goals, and are motivated.Here's a look at just some of the perks and benefits we make available to our US-based employees:

Medical & Dental

401(k) Savings Plan

Generous paid time off

Life Milestones - from adoption assistance, childcare resources, pet insurance, and more, Comcast supports you at all life stages.

Courtesy Services - We offer all of our full-time employees in serviceable areas free digital TV and internet.

Discount tickets for Universal Resorts, including theme park tickets and onsite hotel rooms.

Learn more at jobs.comcast.com/life-at-comcast/benefits We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, perform essential job functions, and receive other benefits and privileges of employment. Please contact us to request an accommodation.Disclaimer:

This information has been designed to indicate the general nature and level of work performed by employees in this role. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications.

Comcast is an EOE/Veterans/Disabled/LGBT employerComcast is proud to be an equal opportunity workplace. We will consider all qualified applicants for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, veteran status, genetic information, or any other basis protected by applicable law.EducationBachelor's DegreeWhile possessing the stated degree is preferred, Comcast also may consider applicants who hold some combination of coursework and experience, or who have extensive related professional experience.Relevant Work Experience5-7 YearsBase pay is one part of the Total Rewards that Comcast provides to compensate and recognize employees for their work. Most sales positions are eligible for a Commission under the terms of an applicable plan, while most non-sales positions are eligible for a Bonus. Additionally, Comcast provides best-in-class Benefits. We believe that benefits should connect you to the support you need when it matters most, and should help you care for those who matter most. That’s why we provide an array of options, expert guidance and always-on tools, that are personalized to meet the needs of your reality – to help support you physically, financially and emotionally through the big milestones and in your everyday life. Please visit the compensation and benefits summary (https://jobs.comcast.com/life-at-comcast/benefits) on our careers site for more details.