Security Engineer 3

.

Job Summary

Responsible for working with the Network and Systems Engineers to create, maintain and enforce security policies effecting the network. Responsible for securing all information and information systems assets of the Company network infrastructure. Design/install/operations of VPN, SoHo, WAF, IDS, DDoS, Partner Access Solutions, Network Security Stack powering Zero-Trust, Firewalls and microsegmentation protecting CCS operations infrastructure (SIEM, DataLake, WAF, IDS, SOC dashboards). Has in-depth experience, knowledge and skills in own discipline. Usually determines own work priorities. Acts as a resource for colleagues with less experience.

Job Description

• Expertise in Linux with experience in major distributions such as RHEL, Rocky Linux, Ubuntu and Amazon Linux.
• Hands-on experience with at least one EDR tool such as CrowdStrike, Sentinel One, Defender or Trend Micro (CrowdStrike is a strong plus).
• Capable of writing and managing Ansible roles/playbooks for automating EDR deployment.
• Strong experience in container security particularly with Docker.
• Proficient in Kubernetes orchestration with hands-on experience in AWS EKS, Azure AKS, and self-hosted orchestrators.
• Skilled in handling AWS security at the endpoint level especially for EC2-backed workloads.
• Solid foundational knowledge of cybersecurity principles.
• Basic scripting skills in Python and Shell for task automation, alert customization and API integration in tools like CrowdStrike Falcon.
• Strong documentation skills for automation processes, projects and major tasks.
• Prior experience analysing hashes provided by the Incident Response team.
• Skilled in troubleshooting and resolving issues on EDR-protected machines.
• Ability to work with EDR vendors to proactively address issues and implement new features.
• Conducts regular EDR agent testing and assesses the impact of new versions on enterprise systems.
• Experience implementing tasks within a Change Management process especially for production impacting changes.
• Knowledgeable in managing forward and reverse proxy tools such as HAP Roxy and Squid for secure data flow.
• Understanding of cloud security posture to identify and address gaps in endpoint protection.
• Able to collaborate with application teams to address P1/P2 incidents during outages.
• Proactively generates new ideas to improve endpoint security posture and protect enterprise assets.

Disclaimer:
This information has been designed to indicate the general nature and level of work performed by employees in this role. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications.

Skills

We believe that benefits should connect you to the support you need when it matters most, and should help you care for those who matter most. Thats why we provide an array of options, expert guidance and always-on tools that are personalized to meet the needs of your reality to help support you physically, financially and emotionally through the big milestones and in your everyday life.

Please visit the benefits summary on our careers site for more details.

Education

Bachelors Degree

While possessing the stated degree is preferred, Comcast also may consider applicants who hold some combination of coursework and experience, or who have extensive related professional experience.

Certifications (if applicable)

Relative Work Experience

5-7 Years

Comcast is proud to be an equal opportunity workplace. We will consider all qualified applicants for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, veteran status, genetic information, or any other basis protected by applicable law.