Comcast Cybersecurity: Architect (Level 5) - IoT & Embedded Linux Systems Security Design at Comcast Corporation

Make your mark at Comcast -- a Fortune 30 global media and technology company. From the connectivity and platforms we provide, to the content and experiences we create, we reach hundreds of millions of customers, viewers, and guests worldwide. Become part of our award-winning technology team that turns big ideas into cutting-edge products, platforms, and solutions that our customers love. We create space to innovate, and we recognize, reward, and invest in your ideas, while ensuring you can proudly bring your authentic self to the workplace. Join us. You’ll do the best work of your career right here at Comcast. (In most cases, Comcast prefers to have employees on-site collaborating unless the team has been designated as virtual due to the nature of their work. If a position is listed with both office locations and virtual offerings, Comcast may be willing to consider candidates who live greater than 100 miles from the office for the remote option.)

Job Summary

Responsible for promoting the use of industry and secure Company technology standards within the realm of Internet of Things (IoT) & Embedded Linux Systems using security design principles. Monitors emerging technologies/technology practices in the IoT space for potential use within the Company. Designs and develops updated Embedded System security infrastructure in support of one or more business processes. Helps to ensure a balance between tactical and strategic technology solutions. Considers business problems "end-to-end": including people, process and technology, both within and outside the enterprise, as part of any design solution. Mentors, reviews codes and verifies that the object oriented design best practices and that coding and architectural guidelines are adhered to. Identifies and drives issues through closure. Bonus points for knowledge of Real Time Operating Systems (RTOS), System-on-a-Chip (SoC) concepts, familiarity with the C/C++ programming language, the Linux command line (CLI), and/or some practical experience with Raspberry Pi, Arduino, or other similar Linux developer-style boards.

Job Description

Must Have Skills

• Must Have knowledge of modern Linux security concepts such as Security-Enhanced Linux (SELinux), AppAmor, Grsecurity, or other hardening techniques. Professional certifications are welcomed, but not required (SANS GIAC GSEC, Red Hat RHCE, Red Hat RHCSA, ISC2 CISSP, ISACA CISA, ISACA CISM, EC-Council CEH, CompTIA Linux Plus, etc.)
• Must have experience with industry and secure Company technology standards within the realm of Internet of Things (IoT) & Embedded Linux Systems using security design principles.
•  Must have experience with monitoring emerging technologies/technology practices in the IoT space for potential use within the Company. Designs and develops updated Embedded System security infrastructure in support of one or more business processes.
•  Must have experience with balance between tactical and strategic technology solutions. Considers business problems "end-to-end": including people, process and technology, both within and outside the enterprise, as part of any design solution. Mentors, reviews pseudo code (when applicable) and verifies that coding concepts and architecture guidelines adhere to secure design best practices.
• Must have familiarity with CVEs, CVSS scores, and prioritizing security vulnerability fixes. Identifies and drives issues through closure.
• Effective communication skills while coordinating with many global engineering teams across many time zones, cultures, and geographies. 

Nice To Have:

• Knowledge of Real Time Operating Systems (RTOS), System-on-a-Chip (SoC) concepts, some familiarity with the C/C++ programming language, Yocto/Jenkins Build Systems, secure networking concepts, cryptography and chain-of-trust (high level) concepts, the Linux command line (CLI), awareness of common Open Source libraries, and/or some practical experience with Raspberry Pi, Arduino, or other similar Linux developer-style boards.
• Knowledge of modern Linux security concepts such as Security-Enhanced Linux (SELinux), AppAmor, Grsecurity, or other hardening techniques. Professional certifications are welcomed, but not necessary (SANS GIAC GSEC, Red Hat RHCE, Red Hat RHCSA, ISC2 CISSP, ISACA CISA, EC-Council CEH, CompTIA Linux Plus, etc.) Role is four days per week in-person (on average, with some limited flexibility week-to-week) at Philadelphia’s Comcast Technology Center.
• Responsible for promoting the use of industry and secure Company technology standards within the realm of Internet of Things (IoT) & Embedded Linux Systems using security design principles. Monitors emerging technologies/technology practices in the IoT space for potential use within the Company. Designs and develops updated Embedded System security infrastructure in support of one or more business processes.
• Helps to ensure a balance between tactical and strategic technology solutions. Considers business problems "end-to-end": including people, process and technology, both within and outside the enterprise, as part of any design solution. Mentors, reviews pseudo code (when applicable) and verifies that coding concepts and architecture guidelines adhere to secure design best practices.
• Familiarity with CVEs, CVSS scores, and prioritizing security vulnerability fixes. Identifies and drives issues through closure. Bonus points for knowledge of Real Time Operating Systems (RTOS), System-on-a-Chip (SoC) concepts, some familiarity with the C/C++ programming language, Yocto/Jenkins Build Systems, secure networking concepts, cryptography and chain-of-trust (high level) concepts, the Linux command line (CLI), awareness of common Open Source libraries, and/or some practical experience with Raspberry Pi, Arduino, or other similar Linux developer-style boards.

Comcast is proud to be an equal opportunity workplace. We will consider all qualified applicants for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, veteran status, genetic information, or any other basis protected by applicable law.

Skills:

Programming Languages; Embedded Systems; Linux; Real-Time Operating Systems (RTOS)

Base pay is one part of the Total Rewards that Comcast provides to compensate and recognize employees for their work. Most sales positions are eligible for a Commission under the terms of an applicable plan, while most non-sales positions are eligible for a Bonus. Additionally, Comcast provides best-in-class Benefits to eligible employees. We believe that benefits should connect you to the support you need when it matters most, and should help you care for those who matter most. That’s why we provide an array of options, expert guidance and always-on tools, that are personalized to meet the needs of your reality – to help support you physically, financially and emotionally through the big milestones and in your everyday life. Please visit the compensation and benefits summary on our careers site for more details.

Certifications

CISSP - Certified Information Systems Security Professional - (ISC)²

Education

Bachelor's Degree

While possessing the stated degree is preferred, Comcast also may consider applicants who hold some combination of coursework and experience, or who have extensive related professional experience.

Relevant Work Experience

10 Years +