Engineer 2 - Security Operations Job in Comcast

Position Summary:

As a CyberSecurity Engineer, you will join a dedicated, professional team responsible for network security in the Comcast network. The Security Engineer position is responsible for the configuration, deployment and support of network security and engineering systems including firewalls, VPN s, A10/SSLi, F5 SSLO/ASM/APM, Proxy and supporting tools for managing secure connectivity.Responsibility includes monitoring performance, operation, enhancement and fault events and performing the appropriate response to adequately close or escalate the events to completion.

The individual in this role will perform more advanced security systems configurations, upgrades and troubleshooting, as well design engineering solutions for security tools (i.e., firewalls, routers, Intrusion Detection/Prevention Systems, and rule automation). During a critical security connectivity event, this position will be authorized to make customized changes to the various security tools or system configurations to minimize the immediate impact to the business.

Major Duties:

Perform proactive maintenance, upgrades and enhancements in accordance with National Change Management procedures.

Implement and maintain security connectivity solutions including Fortinet/F5/NSX/Palo Alto firewalls, Symantec Proxy, A10/F5 SSL technology.

Contribute to the design, development and maintenance of the company s network security environment, to ensure efficient and secure information flow.

Perform troubleshooting of network connectivity issues involving security products, firewall/ACL rules, complex routing and NAT rules.

Perform configuration updates, such as modifying configurations, signature definitions or implementing new policies on various network security tools, as directed.

Define and improve daily operating procedures and administration for assigned elements.

Develop and document network security topology diagrams and familiarity with SHAREPOINT/WIKI.

Be able to leverage other network management tools used by the National Operations Centers or Local Management Centers in the identification and response to security connectivity incidents and faults.

Ensure timely proactive identification and reporting of security gaps and vulnerabilities to the critical business information, systems and network infrastructure.

Assist with security compliance audits to verify completeness of required configurations and verify system hardening.

Participate in the problem investigation of connectivity issues and security events related to security devices, identify root problem cause, and provide recommendations to improve reliability and availability, or reduce recovery time.

Weekly on-call shifts, rotating approximately once every 2 months.

Other duties as assigned.

Minimum Qualifications:

Education:

Minimum of Bachelor s Degree in Networking, Network Security, Computer Science, or related field. An advanced degree preferred.

Network and/or security certifications such as SANS GIAC, Security+, SSCP or other security certifications

Preferable: CCNA Security or R/S

Knowledge and Experience:

Working knowledge of complex networking technologies, including: IP Addressing v4/v6, routing, switching, load balancing, DNS, DHCP, NAT rules

Knowledge of complex network operating environments, including remotely-hosted or cloud-based service offerings

Advanced knowledge of information security methodologies

Experience with Fortinet, Symantec, Zscaler, A10, F5, Gigamon

Routing protocols including BGP and STATIC.

In-depth troubleshooting and strong analytic skills.

Minimum 5 years of experience in administration and operations of network and security gear (Arista/Juniper/Cisco routers and switches)

Minimum 5 years of experience with TCP/IP and UDP protocols and networking packet analysis

Experience with firewall policy creation and rule updates, configuration and troubleshooting; firewall administration experience required.

Must be familiar with trouble ticketing procedures and have strong written and verbal communication skills.

Proven analytical and problem-solving ability.

Ability to work under pressure.

Aptitude to work with others

Ability to accept and learn from fault or incidents

Comfortable with interfacing with other internal or external organizations regarding failure and incident response situations.