Comcast brings together the best in media and technology. We drive innovation to create the world's best entertainment and online experiences. As a Fortune 50 leader, we set the pace in a variety of innovative and fascinating businesses and create career opportunities across a wide range of locations and disciplines. We are at the forefront of change and move at an amazing pace, thanks to our remarkable people, who bring cutting-edge products and services to life for millions of customers every day. If you share in our passion for teamwork, our vision to revolutionize industries and our goal to lead the future in media and technology, we want you to fast-forward your career at Comcast. **Job Summary** Responsible for planning and designing new software and web applications. Analyzes, tests and assists with the integration of new applications. Oversees the documentation of all development activity. Trains non-technical personnel. Assists with tracking performance metrics. Integrates knowledge of business and functional priorities. Acts as a key contributor in a complex and crucial environment. May lead teams or projects and shares expertise. **Job Description** **Core Responsibilities** • Proficient in managing your workload independently and familiarise yourself with industry business practices and procedures while taking ownership of your development pathway alongside your line manager and colleagues. • Work towards achieving a defined set of objectives identified between yourself and your line manager, tailored to your goals. • You will be able to perform an end-to-end threat model, using the STRIDE methodology, independently of any help. This means to organise, perform, document, engage stakeholders and follow up on the threat models taking place. • Develop and implement threat modelling methodologies and frameworks to assess our systems' security posture. • Conduct threat modelling exercises, utilizing tools and techniques to identify vulnerabilities and potential attack vectors. • Collaborate with stakeholders to integrate security controls and best practices into the software development lifecycle. • Recommend and design effective counter measures and risk mitigation strategies based on threat modelling findings. • Provide guidance and support to development teams on implementing security controls and addressing identified vulnerabilities. • Communicate effectively with stakeholders with varying levels of technical knowledge to explain security concepts. • Support external departments by providing early review of security implications and making necessary recommendations. • Engage with cyber stakeholders, the wider business, and external entities to facilitate and support the delivery of cyber services and initiatives. • Always look to improve your understanding and knowledge of the following. • Regulatory requirements on our business: TSA, PCI, SWIFT, GDPR (not an exhaustive list) • Architectural domains. DLP, CLOUD, IDAM, APP SW, LOGGING & MONITORING (not an exhaustive list) • Departments and their verticals. CONTENT, CUSTOMER, ISP, PRODUCT, DIGITAL, DATA (not an exhaustive list) **Employees at all levels are expected to:** + •Demonstrate a passion for cyber security and have a positive outlook and approach to the work we do.•8+ years' experience working within a security field or related discipline. Can be substituted for a relevant degree or equivalent qualification by related subjects such as technologies (e.g. MS IDAM experience), or any experience of compliance/regulatory frameworks (which may or may not by topics considered typical cyber security i.e. EECC, CCA, OFCOM or OSCR for example)•Strong skills in analytical, decision making, verbal and written communication capabilities.•Excellent teamwork skills to ensure we all collaborate, share and support one another.•Experience in Threat Modelling:•Strong understanding of threat modelling methodologies and frameworks, such as STRIDE, DREAD, or CAPEC.•Proficiency in conducting threat modelling exercises and identifying security vulnerabilities across various systems and applications.•Familiarity with industry best practices and standards related to threat modelling and security analysis.•Exposure to threat modelling tools and automation frameworks to enhance efficiency and accuracy.•Exposure with popular threat modelling tools, such as Microsoft Threat Modeling Tool, OWASP Threat Dragon, or ThreatModeler. **Disclaimer:** + This information has been designed to indicate the general nature and level of work performed by employees in this role. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications. Comcast is proud to be an equal opportunity workplace. We will consider all qualified applicants for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, veteran status, genetic information, or any other basis protected by applicable law. Base pay is one part of the Total Rewards that Comcast provides to compensate and recognize employees for their work. Most sales positions are eligible for a Commission under the terms of an applicable plan, while most non-sales positions are eligible for a Bonus. Additionally, Comcast provides best-in-class Benefits to eligible employees. We believe that benefits should connect you to the support you need when it matters most, and should help you care for those who matter most. That’s why we provide an array of options, expert guidance and always-on tools, that are personalized to meet the needs of your reality – to help support you physically, financially and emotionally through the big milestones and in your everyday life. Please visit the compensation and benefits summary (https://jobs.comcast.com/benefits) on our careers site for more details. **Education** Bachelor's Degree While possessing the stated degree is preferred, Comcast also may consider applicants who hold some combination of coursework and experience, or who have extensive related professional experience. **Relevant Work Experience** 10 Years +, 5-7 Years, 2-5 Years, 0-2 Years, 15 Years +, 7-10 Years **Job Family Group:** Engineering