Engineer 3 - Cyber Security

Job description

Comcast brings together the best in media and technology. We drive innovation to create the world's best entertainment and online experiences. As a Fortune 50 leader, we set the pace in a variety of innovative and fascinating businesses and create career opportunities across a wide range of locations and disciplines. We are at the forefront of change and move at an amazing pace, thanks to our remarkable people, who bring cutting-edge products and services to life for millions of customers every day. If you share in our passion for teamwork, our vision to revolutionize industries and our goal to lead the future in media and technology, we want you to fast-forward your career at Comcast. Job Summary This job ensures the integrity and security of the company's cyber infrastructure by designing robust system architecture. It also entails solving complex engineering challenges. It involves documenting technical processes, reporting outcomes, and recommending innovative solutions. The role supports project teams and influences engineering staff, while maintaining a comprehensive understanding of network protocols and security strategies. The position requires flexibility to work variable schedules, including nights and weekends, as necessary. Job Description Position: Engineer 3 - Cyber Security  Experience: 5 years to 8 years Job Location: Chennai Tamil Nadu Live the Sky Values and demonstrate enthusiasm and a can-do attitude. • Demonstrate a passion for cyber security and have a positive outlook and approach to the work we do. • 5+ years' experience working within a security field or related discipline. Can be substituted for a relevant degree or equivalent qualification by related subjects such as technologies (e.g. MS IDAM experience), or any experience of compliance/regulatory frameworks (which may or may not by topics considered typical cyber security i.e. EECC, CCA, OFCOM or OSCR for example) • Strong skills in analytical, decision making, verbal and written communication capabilities. • Excellent teamwork skills to ensure we all collaborate, share and support one another. • Experience in Threat Modelling: • Strong understanding of threat modelling methodologies and frameworks, such as STRIDE, DREAD, or CAPEC. • Proficiency in conducting threat modelling exercises and identifying security vulnerabilities across various systems and applications. • Familiarity with industry best practices and standards related to threat modelling and security analysis. • Exposure to threat modelling tools and automation frameworks to enhance efficiency and accuracy. • Exposure with popular threat modelling tools, such as Microsoft Threat Modeling Tool, OWASP Threat Dragon, or ThreatModeler. What you will do: • Proficient in managing your workload independently and familiarise yourself with industry business practices and procedures while taking ownership of your development pathway alongside your line manager and colleagues. • Work towards achieving a defined set of objectives identified between yourself and your line manager, tailored to your goals. • You will be able to perform an end-to-end threat model, using the STRIDE methodology, independently of any help. This means to organise, perform, document, engage stakeholders and follow up on the threat models taking place. • Develop and implement threat modelling methodologies and frameworks to assess our systems' security posture. • Conduct threat modelling exercises, utilizing tools and techniques to identify vulnerabilities and potential attack vectors. • Collaborate with stakeholders to integrate security controls and best practices into the software development lifecycle. • Recommend and design effective counter measures and risk mitigation strategies based on threat modelling findings. • Provide guidance and support to development teams on implementing security controls and addressing identified vulnerabilities. • Communicate effectively with stakeholders with varying levels of technical knowledge to explain security concepts. • Support external departments by providing early review of security implications and making necessary recommendations. • Engage with cyber stakeholders, the wider business, and external entities to facilitate and support the delivery of cyber services and initiatives. • Always look to improve your understanding and knowledge of the following. • Regulatory requirements on our business: TSA, PCI, SWIFT, GDPR (not an exhaustive list) • Architectural domains. DLP, CLOUD, IDAM, APP SW, LOGGING & MONITORING (not an exhaustive list) • Departments and their verticals. CONTENT, CUSTOMER, ISP, PRODUCT, DIGITAL, DATA (not an exhaustive list) Responsibilities: • Architecting secure system infrastructure within engineering projects, including the creation of design specifications • Applying in-depth cybersecurity knowledge to solve complex development challenges and advance engineering objectives • Documenting technical processes and results, and reporting findings to management with recommendations for innovative solutions • Managing relationships with project groups and guiding less experienced cybersecurity staff • Implementing cybersecurity measures for network infrastructure protection, adhering to secure routing protocols and best practices • Conducting security assessments and audits to identify risks, and collaborating with teams to enhance organizational security posture • Analyzing and responding to security incidents, leveraging technical expertise to mitigate impact on operations • Maintaining current knowledge of cybersecurity trends and threats to inform strategic defenses and improve security m