Comcast's Technology & Product organization works at the intersection of media and technology. Our innovative teams are continually developing and delivering products that transform the customer experience. From creating apps like TVGo to new features such as the Talking Guide on the X1 platform, we work every day to make a positive impact through innovation in the pursuit of building amazing products that are enjoyable, easy to use and accessible across all platforms. The team also develops and supports our evolving network architecture, including next-generation consumer systems and technologies, infrastructure and engineering, network integration and management tools, and technical standards.

Summary

The National Security Operations' Security Response Center Engineer 3 position is responsible for monitoring security system events in a 24 X 7 Security Response Center facility.Responsibility includes managing performance, fault and security incident events and performing the appropriate response to adequately close or escalate the events until closure.In addition, will perform the more advance security systems configurations, upgrades and troubleshooting changes per approved change requests and/or Operations tickets for security tools (i.e., firewalls, routers, Intrusion Detection/Prevention Systems, etc.).During a critical security event, this position will be authorized to make customized changes to the various security tools or system configurations to minimize the immediate impact to the business.



Core Responsibilities

* Monitor all SRC, National NOCs and Local Management Centers events to identify security issues or respond to automated event identification.

* Develop, execute and maintain security system fault management support procedures for assigned systems.

* Develop, execute, and maintain security incident management procedures for large ISP network and systems.

* Investigate opportunities to update security system capabilities or perform policy updates based upon system performance reports and observed incidents or threats.

* Perform configuration updates, such as modifying configurations, signature definitions or implementing new policies, as directed.

* Assist with daily OS and application level administration for assigned security elements.

* Respond to security incidents and report on incident handling and resolution including documenting Incident reports for senior management.

* Conduct security forensics investigations and control the "Chain of Custody" of evidence gathered during investigations.

* Analyzing and correcting security application or system faults to reestablish

* Be able to leverage other network management tools in the identification and response to security incidents and faults.

* Ensure timely proactive identification and reporting of security gaps and vulnerabilities to the network infrastructure.

* Assist with daily virus, vulnerability and exploit assessment review and development as necessary.

* Assist with security audits to verify completeness of security required configurations and verify system hardening.

* Participate in the post-mortem investigation of catastrophic network security incidents and prepare security incident reports documenting the findings.

* Train new SRC personnel in department monitoring and escalation procedures.

* Develop and update the department's Situational Awareness Dashboard

* Other duties as assigned.

Skill and Abilities

* Minimum 5 to 7 years of experience with Security Incident Handling / Security System Administration in an ISP, large-scale network environment, or Large Enterprise, or equivalent work experience in a Managed Security Service Provider organization.

* Minimum 5to 7+-years of experience in monitoring security events and security incident handling.

* Minimum 5 to 7+ years of experience in administering network gear (i.e., Cisco routers and switches) and at least one year of CMTS experience is desired

* Minimum 5 to 7+ years of experience administering UNIX or Linux based applications (or) at least one year of experience administering UNIX or Linux systems in secure environments.

* Minimum 5 to 7+ years in security incident response and technical forensics investigation.

* Firm understanding of security controls and best practices to secure databases and application layers.

* Security assessment / audit experience using automated tools and manual verifications.

* Must be able to work on round-the-clock shifts, rotating or fixed.

* Minimum of 5 to 7+ years of experience with TCP/IP and UDP/IP networking

* Experience with firewall policy creation and rule updates, configuration and troubleshooting; firewall administration experience preferred.

* Experience with Radius system administration, creating and modifying user and group access rights, TFA configurations, reporting and troubleshooting.

* Strong working knowledge of network Intrusion Detection and Intrusion Prevention Systems.

* Must be familiar with trouble ticketing procedures and have strong written and verbal communication skills.

* Knowledge or experience with network based security mitigation systems or tools.

* Proven analytical and problem solving ability.

* Computer Security Forensics and investigation including handling of "chain of custody" of acquired evidence.

* Large enterprise Backbone Security and IPv6 Security

* Comfortable with interfacing with other internal or external organizations regarding failure and incident response situations.



Education Level:
Bachelor's Degree

Field of Study:Information Technology, Computer Science, Information Systems, Computer Engineering

CertificationsPreferred: CISSP, GCIH, GSEC

Years' Experience:Requires 5+ years related experience.

Comcast is an EOE/Veterans/Disabled/LGBT employer and all qualified applicants will receive consideration for employment without regard to age, race, creed, color, national origin, ancestry, marital status, affectional or sexual orientation, gender identity or expression, disability, nationality, sex or any other legally protected category.

Read More

Copyright © 2017 Americanlisted.com, All Rights Reserved.
Designated trademarks and brands are the property of their respective owners.