Development Engineer 4

.

Job Summary

Responsible for planning and designing new software and web applications. Analyzes, tests and assists with the integration of new applications. Oversees the documentation of all development activity. Trains non-technical personnel. Assists with tracking performance metrics. Integrates knowledge of business and functional priorities. Acts as a key contributor in a complex and crucial environment. May lead teams or projects and shares expertise.

Job Description

Core Responsibilities

Proficient in managing your workload independently and familiarise yourself with industry business practices and procedures while taking ownership of your development pathway alongside your line manager and colleagues.

Work towards achieving a defined set of objectives identified between yourself and your line manager, tailored to your goals.

You will be able to perform an end-to-end threat model, using the STRIDE methodology, independently of any help. This means to organise, perform, document, engage stakeholders and follow up on the threat models taking place.

Develop and implement threat modelling methodologies and frameworks to assess our systems security posture.

Conduct threat modelling exercises, utilizing tools and techniques to identify vulnerabilities and potential attack vectors.

Collaborate with stakeholders to integrate security controls and best practices into the software development lifecycle.

Recommend and design effective counter measures and risk mitigation strategies based on threat modelling findings.

Provide guidance and support to development teams on implementing security controls and addressing identified vulnerabilities.

Communicate effectively with stakeholders with varying levels of technical knowledge to explain security concepts.

Support external departments by providing early review of security implications and making necessary recommendations.

Engage with cyber stakeholders, the wider business, and external entities to facilitate and support the delivery of cyber services and initiatives.

Always look to improve your understanding and knowledge of the following.

Regulatory requirements on our business: TSA, PCI, SWIFT, GDPR (not an exhaustive list)

Architectural domains. DLP, CLOUD, IDAM, APP SW, LOGGING & MONITORING (not an exhaustive list)

Departments and their verticals. CONTENT, CUSTOMER, ISP, PRODUCT, DIGITAL, DATA (not an exhaustive list)

Employees at all levels are expected to:

• 
  Demonstrate a passion for cyber security and have a positive outlook and approach to the work we do.
  
  8+ years experience working within a security field or related discipline. Can be substituted for a relevant degree or equivalent qualification by related subjects such as technologies (e. g. MS IDAM experience), or any experience of compliance/regulatory frameworks (which may or may not by topics considered typical cyber security i. e. EECC, CCA, OFCOM or OSCR for example)
  
  Strong skills in analytical, decision making, verbal and written communication capabilities.
  
  Excellent teamwork skills to ensure we all collaborate, share and support one another.
  
  Experience in Threat Modelling:
  
  Strong understanding of threat modelling methodologies and frameworks, such as STRIDE, DREAD, or CAPEC.
  
  Proficiency in conducting threat modelling exercises and identifying security vulnerabilities across various systems and applications.
  
  Familiarity with industry best practices and standards related to threat modelling and security analysis.
  
  Exposure to threat modelling tools and automation frameworks to enhance efficiency and accuracy.
  
  Exposure with popular threat modelling tools, such as Microsoft Threat Modeling Tool, OWASP Threat Dragon, or ThreatModeler.

Disclaimer:

• This information has been designed to indicate the general nature and level of work performed by employees in this role. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications.

Skills

We believe that benefits should connect you to the support you need when it matters most, and should help you care for those who matter most. Thats why we provide an array of options, expert guidance and always-on tools that are personalized to meet the needs of your reality to help support you physically, financially and emotionally through the big milestones and in your everyday life.

Please visit the benefits summary on our careers site for more details.

Education

Bachelors Degree

While possessing the stated degree is preferred, Comcast also may consider applicants who hold some combination of coursework and experience, or who have extensive related professional experience.

Certifications (if applicable)

Relative Work Experience

7-10 Years

Comcast is proud to be an equal opportunity workplace. We will consider all qualified applicants for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, veteran status, genetic information, or any other basis protected by applicable law.