Engineer 3 - Cyber Security

Comcast brings together the best in media and technology. We drive innovation to create the world's best entertainment and online experiences. As a Fortune 50 leader, we set the pace in a variety of innovative and fascinating businesses and create career opportunities across a wide range of locations and disciplines. We are at the forefront of change and move at an amazing pace, thanks to our remarkable people, who bring cutting-edge products and services to life for millions of customers every day. If you share in our passion for teamwork, our vision to revolutionize industries and our goal to lead the future in media and technology, we want you to fast-forward your career at Comcast.

This job ensures the integrity and security of the company's cyber infrastructure by designing robust system architecture. It also entails solving complex engineering challenges. It involves documenting technical processes, reporting outcomes, and recommending innovative solutions. The role supports project teams and influences engineering staff, while maintaining a comprehensive understanding of network protocols and security strategies. The position requires flexibility to work variable schedules, including nights and weekends, as necessary.

Position: Engineer 3 - Cyber Security  Experience: 5 years to 8 years Job Location: Chennai Tamil Nadu Live the Sky Values and demonstrate enthusiasm and a can-do attitude. • Demonstrate a passion for cyber security and have a positive outlook and approach to the work we do. • 5+ years' experience working within a security field or related discipline. Can be substituted for a relevant degree or equivalent qualification by related subjects such as technologies (e.g. MS IDAM experience), or any experience of compliance/regulatory frameworks (which may or may not by topics considered typical cyber security i.e. EECC, CCA, OFCOM or OSCR for example) • Strong skills in analytical, decision making, verbal and written communication capabilities. • Excellent teamwork skills to ensure we all collaborate, share and support one another. • Experience in Threat Modelling: • Strong understanding of threat modelling methodologies and frameworks, such as STRIDE, DREAD, or CAPEC. • Proficiency in conducting threat modelling exercises and identifying security vulnerabilities across various systems and applications. • Familiarity with industry best practices and standards related to threat modelling and security analysis. • Exposure to threat modelling tools and automation frameworks to enhance efficiency and accuracy. • Exposure with popular threat modelling tools, such as Microsoft Threat Modeling Tool, OWASP Threat Dragon, or ThreatModeler. What you will do: • Proficient in managing your workload independently and familiarise yourself with industry business practices and procedures while taking ownership of your development pathway alongside your line manager and colleagues. • Work towards achieving a defined set of objectives identified between yourself and your line manager, tailored to your goals. • You will be able to perform an end-to-end threat model, using the STRIDE methodology, independently of any help. This means to organise, perform, document, engage stakeholders and follow up on the threat models taking place. • Develop and implement threat modelling methodologies and frameworks to assess our systems' security posture. • Conduct threat modelling exercises, utilizing tools and techniques to identify vulnerabilities and potential attack vectors. • Collaborate with stakeholders to integrate security controls and best practices into the software development lifecycle. • Recommend and design effective counter measures and risk mitigation strategies based on threat modelling findings. • Provide guidance and support to development teams on implementing security controls and addressing identified vulnerabilities. • Communicate effectively with