Senior Remediation Engineer (Engineer 4)

Make your mark at Comcast -- a Fortune 30 global media and technology company. From the connectivity and platforms we provide, to the content and experiences we create, we reach hundreds of millions of customers, viewers, and guests worldwide. Become part of our award-winning technology team that turns big ideas into cutting-edge products, platforms, and solutions that our customers love. We create space to innovate, and we recognize, reward, and invest in your ideas, while ensuring you can proudly bring your authentic self to the workplace. Join us. You’ll do the best work of your career right here at Comcast. (In most cases, Comcast prefers to have employees on-site collaborating unless the team has been designated as virtual due to the nature of their work. If a position is listed with both office locations and virtual offerings, Comcast may be willing to consider candidates who live greater than 100 miles from the office for the remote option.)

Job Summary

We are seeking a highly skilled and motivated Senior Vulnerability Remediation Engineer to join our Cybersecurity team. In this critical role, you will serve as a technical authority for vulnerability remediation across Comcast’s enterprise environment. You will lead efforts to translate vulnerability findings into effective, scalable fixes by partnering closely with engineering teams, developing remediation strategies, and driving systemic risk reduction. This role sits at the intersection of penetration testing, vulnerability management, and engineering enablement — ensuring that security findings result in meaningful, lasting improvements to Comcast’s security posture.

Job Description

Core Responsibilities:

• Partner with developers, infrastructure, and application teams to provide hands-on guidance on vulnerability remediation aligned with Comcast policies and industry best practices. 

• Act as a subject-matter expert for remediation strategies across application, cloud, and infrastructure environments. 

• Validate remediation efforts and ensure fixes meet security and quality requirements. 

• Collaborate with peers across Comcast to review, curate, and prioritize security vulnerabilities. 

• Work closely with the Penetration Testing team on Continuous Penetration Testing (CPT) initiatives and targeted testing efforts. 

• Lead organization-wide vulnerability burn-down efforts and drive measurable reduction of backlog. 

• Develop automation, scripts, and remediation playbooks to improve speed, consistency, and scalability of remediation. 

• Identify recurring vulnerability patterns and drive long-term, systemic fixes. 

• Mentor junior engineers and provide technical leadership in remediation efforts. 

• Stay current with emerging threats, vulnerabilities, and remediation best practices. 

• Other duties and responsibilities as assigned. 

Must Have Skills:

• Strong understanding of vulnerability scanning and penetration testing methodologies. 

• Deep knowledge of CVEs, CVSS scoring, and vulnerability prioritization frameworks. 

• Familiarity with standard vulnerability categories (OWASP Top 10, Bugcrowd VRT, etc.). 

• Hands-on experience with cloud platforms (AWS, GCP, Azure) and modern application environments. 

• Experience working with commercial and open-source security tools (Burp, Nessus, Qualys, Nexpose, Nmap, etc.). 

• Strong understanding of common security threats, attack techniques, and defensive controls. 

• Proficiency in one or more scripting or programming languages (Python, Bash, PowerShell, Java, C#, etc.). 

• Demonstrated experience leading remediation efforts and influencing engineering teams. 

• Excellent communication and collaboration skills with the ability to operate across organizational levels. 

• Proactive, results-driven mindset with strong ownership. 

Nice to Have :

• Experience with container and orchestration technologies (Docker, Kubernetes). 

• Familiarity with CI/CD pipelines and secure development practices. 

• Exposure to hardware, IoT, or embedded security. 

• Contributions to research, CTFs, open-source projects, or security conferences. 

What Success Looks Like 

• Ownership of enterprise remediation strategies that result in measurable and sustained risk reduction. 

• Significant and sustained reduction in critical and high-risk vulnerability backlog. 

• Improved remediation SLAs driven by tooling, process design, and technical enablement. 

• Adoption of standardized remediation patterns across engineering organizations. 

• Recognition as a trusted technical authority by security and engineering leadership. 

• Demonstrable improvement in organizational remediation maturity. 

What You Can Expect 

• A dynamic and collaborative work environment with opportunities to showcase your expertise. 

• A culture of innovation and continuous learning. 

• Training, support, and mentoring to expand and evolve your skills. 

• Opportunities to impact the security of Comcast products in millions of homes and businesses. 

Requirements 

• Bachelor’s degree in Information Technology, Information Security, Computer Science, or equivalent experience. 

• Minimum of 7 years of experience in information security or a related technical role. 

• Relevant certifications such as CISSP, CISM, CEH, OSCP preferred. 

Here's a look at just some of the perks and benefits we make available to our US-based employees:

• Medical & Dental

• 401(k) Savings Plan

• Generous paid time off

• Life Milestones - from adoption assistance, childcare resources, pet insurance, and more, Comcast supports you at all life stages.

• Courtesy Services - We offer all of our full-time employees in serviceable areas free digital TV and internet.

• Learn more at jobs.comcast.com/life-at-comcast/benefits

• We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, perform essential job functions, and receive other benefits and privileges of employment. Please contact us to request an accommodation.

Comcast is an equal opportunity workplace. We will consider all qualified applicants for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, veteran status, genetic information, or any other basis protected by applicable law.

Skills:

Network Infrastructures; Cybersecurity; Vulnerability Management; Emerging Technologies

Base pay is one part of the Total Rewards that Comcast provides to compensate and recognize employees for their work. Most sales positions are eligible for a Commission under the terms of an applicable plan, while most non-sales positions are eligible for a Bonus. Additionally, Comcast provides best-in-class Benefits to eligible employees. We believe that benefits should connect you to the support you need when it matters most, and should help you care for those who matter most. That?s why we provide an array of options, expert guidance and always-on tools, that are personalized to meet the needs of your reality ? to help support you physically, financially and emotionally through the big milestones and in your everyday life. Please visit the compensation and benefits summary on our careers site for more details.

Education

Bachelor's Degree

While possessing the stated degree is preferred, Comcast also may consider applicants who hold some combination of coursework and experience, or who have extensive related professional experience.

Relevant Work Experience

7-10 Years