Software Engineer, Security Automation & AI Operations

Make your mark at Comcast -- a Fortune 30 global media and technology company. From the connectivity and platforms we provide, to the content and experiences we create, we reach hundreds of millions of customers, viewers, and guests worldwide. Become part of our award-winning technology team that turns big ideas into cutting-edge products, platforms, and solutions that our customers love. We create space to innovate, and we recognize, reward, and invest in your ideas, while ensuring you can proudly bring your authentic self to the workplace. Join us. You’ll do the best work of your career right here at Comcast. (In most cases, Comcast prefers to have employees on-site collaborating unless the team has been designated as virtual due to the nature of their work. If a position is listed with both office locations and virtual offerings, Comcast may be willing to consider candidates who live greater than 100 miles from the office for the remote option.)Job SummaryTo protect Comcast’s vast ecosystem, we have to move faster than automated threats. We are seeking a Software Engineer to design and build intelligent platforms, automation systems, and data-driven workflows that enable the Cybersecurity Operations Center and partner security teams to operate at scale.This role supports critical security operations functions including threat hunting, incident response, PSIRT, product security, vulnerability risk management, and analyst workflow automation. You will build tools that help security teams detect suspicious activity, triage operational signals, correlate security data, automate repeatable actions, and surface timely context to analysts and responders.This is a hands-on engineering role at the intersection of software development, security operations, data engineering, and applied AI. The ideal candidate is a strong software engineer with a passion for building scalable systems and solving complex security operational problems. You should be comfortable designing distributed systems, developing automation workflows, integrating security platforms, and working across both front-end and back-end technologies.This role requires a strong foundation in data structures, system design, and large-scale data processing, along with the ability to analyze and correlate high-volume security telemetry, incident data, asset context, product security findings, and operational signals.Job DescriptionResponsibilities:Design, develop, and maintain internal platforms and services that support CSOC operations, threat hunting, incident response, PSIRT intake, product security workflows, risk prioritization, and analyst automation.Build automation that reduces analyst toil across alert triage, investigation enrichment, evidence collection, case management, ticketing, notifications, reporting, and operational handoffs.Develop LLM-powered agents and AI-assisted workflows that summarize security events, enrich investigations, automate repetitive triage steps, and surface relevant context to analysts, hunters, responders, and product security teams.Build integrations across security telemetry, SIEM, SOAR, ticketing, source control, scanning, cloud, endpoint, and notification systems.Apply strong data structures and algorithms to process and correlate large volumes of security data, including alerts, incidents, assets, dependency graphs, source repositories, detections, and operational metadata.Partner with threat hunters and incident responders to turn repeatable investigative techniques into durable detection, enrichment, and automation capabilities.Support PSIRT and product security operations by building workflows for intake, triage, prioritization, remediation tracking, and executive-ready reporting.Design secure, observable, and maintainable services that can operate reliably in security-sensitive production environments.Write well-tested code, participate in code reviews, and uphold engineering best practices for systems that support high-pressure security operations.Preferred QualificationsFamiliarity with SIEM, SOAR, EDR, case management, security data lake, or security operations platforms.Familiarity with Databricks, Snowflake, Spark, or similar large-scale data processing platforms.Experience with one or more cloud platforms such as AWS, GCP, or Azure.Experience building analyst-facing tools, dashboards, automation frameworks, or internal platforms.Familiarity with OpenAI SDK, LangChain, LangGraph, agentic workflows, retrieval-augmented generation, or AI-assisted security operations.Familiarity with OWASP Top 10, secure coding practices, software supply chain security, dependency risk, or application security concepts.Experience translating manual security workflows into scalable software, automation, or data products.Disclaimer: This information has been designed to indicate the general nature and level of work performed by employees in this role. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications.SkillsCloud Engineering, Large Language Models (LLMs), Machine Learning Model Management, Secure Coding Practices, Security Automation, Security OperationsWe believe that benefits should connect you to the support you need when it matters most, and should help you care for those who matter most. That's why we provide an array of options, expert guidance and always-on tools that are personalized to meet the needs of your reality—to help support you physically, financially and emotionally through the big milestones and in your everyday life.Please visit the benefits summary on our careers site for more details.EducationBachelor's DegreeWhile possessing the stated degree is preferred, Comcast also may consider applicants who hold some combination of coursework and experience, or who have extensive related professional experience.Certifications (if applicable)Relevant Work Experience5-7 YearsComcast is an equal opportunity workplace. We will consider all qualified applicants for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, veteran status, genetic information, or any other basis protected by applicable law.SummaryLocation: PA - Philadelphia, 1701 John F Kennedy BlvdType: Full time