Comcast brings together the best in media and technology. We drive innovation to create the world's best entertainment and online experiences. As a Fortune 50 leader, we set the pace in a variety of innovative and fascinating businesses and create career opportunities across a wide range of locations and disciplines. We are at the forefront of change and move at an amazing pace, thanks to our remarkable people, who bring cutting-edge products and services to life for millions of customers every day. If you share in our passion for teamwork, our vision to revolutionize industries and our goal to lead the future in media and technology, we want you to quick-forward your career at Comcast.
Job Summary
This job entails safeguarding network integrity by monitoring security events, identifying threats, and managing incident responses. It involves restoring systems post-incident, maintaining an advanced understanding of cyber threats, and continuously enhancing detection capabilities. The role includes performing security audits, risk analysis,
and contributing to the development and implementation of innovative solutions. Additionally, it encompasses documenting processes, reporting to management, and setting performance standards within the cyber operations team.
Key Responsibilities
- Investigate and respond to security incidents from SIEM, EDR, email, cloud and network security tools.
- Perform alert triage and determine the severity and impact of incidents.
- Coordinate containment, eradication and recovery activities with IT teams.
- Document investigation findings and maintain incident records.
- Escalate complex incidents to the L3 Incident Response team.
- Support phishing, malware and account compromise investigations.
- Assist in developing and improving incident response playbooks.
- Provide guidance to L1 analysts during investigations.
- Meet incident response SLAs