Senior Manager - Cybersecurity Incident Response

Make your mark at Comcast -- a Fortune 30 global media and technology company. From the connectivity and platforms we provide, to the content and experiences we create, we reach hundreds of millions of customers, viewers, and guests worldwide. Become part of our award-winning technology team that turns big ideas into cutting-edge products, platforms, and solutions that our customers love. We create space to innovate, and we recognize, reward, and invest in your ideas, while ensuring you can proudly bring your authentic self to the workplace. Join us. You’ll do the best work of your career right here at Comcast. (In most cases, Comcast prefers to have employees on-site collaborating unless the team has been designated as virtual due to the nature of their work. If a position is listed with both office locations and virtual offerings, Comcast may be willing to consider candidates who live greater than 100 miles from the office for the remote option.)

Job Summary

Responsible for managing the daily and overall work processes and practical implementation of cyber engineering and technical standards within one or more assigned areas of the Cyber Security. Monitors assigned areas of Cyber Operations to ensure technical adherence to industry and company standards. Ensures all work processes are efficient and consistent in their daily application. Identifies flaws in the work process and enacts solutions. Manages the efficient service of all technical equipment used. Coordinates complex and multi-disciplined cyber security projects from design to implementation in accordance with the company's policies. Develops financial and operational objectives. Ensures that enterprise-wide operational plans are aligned with business objectives. Responsible for monitoring, identifying, investigating and analyzing all response activities related to cybersecurity incidents within an organization. Identifies security flaws and vulnerabilities; responds to cybersecurity incidents, conducts threat analysis as directed and addresses detected incidents. Conducts network or software vulnerability assessments and penetration testing utilizing reverse engineering techniques. Perform vulnerability analysis and exploitation of applications, operating systems or networks. Identifies intrusion or incident path and method. Isolates, blocks or removes threat access. Evaluates system security configurations. Evaluates findings and performs root cause analysis. Performs analysis of complex software systems to determine both functionality and intent of software systems. Resolves highly complex malware and intrusion issues. Contributes to the design, development and implementation of countermeasures, system integration, and tools specific to Cyber and Information Operations. Develops financial and operational objectives. Ensures operational plans are aligned with business objectives. Contributes to functional strategy development. Has a greater degree of impact on business results, and typically manages one or more groups of professional employees.

Job Description

Responsibilities

• Lead daily operations of the Security Incident Response Team
• Serve as incident commander, leading incident response for major incidents.
• Clearly communicate incident status to critical stakeholders including Cyber Security and Operations leaders, Legal, Communications, and others as required.
• Partner with other key incident monitoring, detection and response functions.
• Own and maintain critical documentation for all significant incidents.
• Mentor and grow a team of highly technical incident responders - including all HR and career development needs.
• Provide oversight and technical review of draft work product prior to finalization.
• Provide thought leadership for program improvements and new initiatives.
• Recommend and produce key metrics, KPIs, and new reports.
• Lead roadmap development and stay current & suggest enhancements in program capabilities.

Required Skills:

• 10+ years experience in Cyber Security, of which at least 5 or more years leading Incident Response with a focus on significant, large scale incident investigations.
• At least 3 years leading or managing a Security Operations team.
• Demonstrated experience briefing audiences of different technical and business levels on incident investigation status.
• Strong technical understanding of the Incident Response process and ability to speak with other business units from a technical perspective for the life cycle of an incident.
• Familiarity with major threat actor groups and TTPs.
• Knowledge of common enterprise-grade endpoint and network defense tools
• Experience working with logging technologies and large data sets.
• Knowledge of major cloud technologies (e.g. AWS, Azure, GCP)
• Ability to coach and lead team members of varying skill levels.

Nice to have experience:

• Previous experience in a Fortune 50 sized organization
• Experience working in a globally disbursed/follow the sun model.
• Knowledge of Digital Forensic Investigations best practices and processes
• Relevant industry certifications (e.g. CISSP, GCIH, GCFA, GCIA)

Employees at all levels are expected to:

• Understand our Operating Principles; make them the guidelines for how you do your job.
• Own the customer experience - think and act in ways that put our customers first, give them seamless digital options at every touchpoint, and make them promoters of our products and services.
• Know your stuff - be enthusiastic learners, users and advocates of our game-changing technology, products, and services, especially our digital tools and experiences.
• Win as a team - make big things happen by working together and being open to new ideas.
• Be an active part of the Net Promoter System - a way of working that brings more employee and customer feedback into the company - by joining huddles, making call backs, and helping us elevate opportunities to do better for our customers.
• Drive results and growth.
• Respect and promote inclusion & diversity.
• Do what's right for each other, our customers, investors, and our communities.

What You Can Expect:

• An encouraging and casual work environment with chances to showcase your skills.
• A culture of innovation and continuous learning.
• Training, support, and mentoring to expand and evolve your expertise.
• For more insight into our culture, check out: https://jobs.comcast.com/meet-comcast/our-culture

About Our Perks & Benefits:
 

We are determined to create an environment where our employees feel valued, understand our business goals, and are motivated.
Here's a look at just some of the perks and benefits we make available to our US-based employees:

• Medical & Dental
• 401(k) Savings Plan
• Generous paid time off
• Life Milestones - from adoption assistance, childcare resources, pet insurance, and more, Comcast supports you at all life stages.
• Courtesy Services - We offer all of our full-time employees in serviceable areas discounted digital TV and internet.
• Discounted tickets for Universal Resorts, and free tickets to our Universal theme parks!
  Learn more at https://jobs.comcast.com/life-at-comcast/benefits

Reasonable Accommodation
 

We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, perform essential job functions, and receive other benefits and privileges of employment. Please contact us to request accommodation.

Comcast is an EOE/Veterans/Disabled/LGBT employer.

Disclaimer:
This information has been designed to indicate the general nature and level of work performed by employees in this role. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities, and qualifications.