Job Description

Company Description

NBCUniversal owns and operates over 20 different businesses across 30 countries including a valuable portfolio of news and entertainment television networks, a premier motion picture company, significant television production operations, a leading television stations group, world-renowned theme parks and a premium ad-supported streaming service.

Here you can be your authentic self. As a company uniquely positioned to educate, entertain and empower through our platforms, Comcast NBCUniversal stands for including everyone. We strive to foster a diverse and inclusive culture where our employees feel supported, embraced and heard. We believe that our workforce should represent the communities we live in, so that together, we can continue to create and deliver content that reflects the current and ever-changing face of the world. Click here to learn more about Comcast NBCUniversal\'s commitment and how we are making an impact.



We are looking for a Cyber Security Technologist to be part of the NBCUniversal Cyber Security Architecture team. The Cyber Security Technologist is an individual contributor who will partner with the NBCUniversal streaming platform business and other Cyber Security teams to ensure solutions are designed and deployed securely and aligned with Cyber Security and technology strategies.

The Security Technologist will be conducting security consulting engagements partnering with the streaming businesses and driving process improvements in threat modeling and risk evaluation. They will function as a technical and engineering subject matter expert across all Cyber Security technology areas with a focus on cloud, network, application, and enterprise security controls. In addition to consulting engagements, the consultant will create architecture references, design patterns, and security guidance where needed. They will be a subject matter expert on one or more technical security topics such as cloud or networking and will mentor and serve as a reviewer for other team members building threat models and providing security guidance.

Finally, a successful candidate must effectively communicate the importance of critical programs and services within the NBCUniversal Cyber Security portfolio to obtain support, trust, and buy-in from the business.

Qualifications

QUALIFICATIONS/REQUIREMENTS

• A firm understanding of enterprise-level IT applications and infrastructure; and experience designing and deploying secure solutions
• Broad knowledge across multiple technology areas with practical and deep experience in one or more areas
• Strong critical thinking, analytical reasoning, and thought leadership capabilities
• Experience defining and influencing security strategy and vision while also supporting and advising on tactical security initiatives
• Strong written/verbal communication and presentation skills with the ability to tailor to both leadership, technical, and non-technical audiences
• Experience developing and documenting architecture references, security guidelines, and standards
• Understanding of and experience applying security controls (Cloud Security Matrix.; NIST CSF; CIS Critical Security Controls, etc.), architecture (TOGAF; SABSA; etc.) or threat analysis frameworks (MITRE ATT&CK; STRIDE, etc.)
• Experience performing threat analysis and modeling
• A strong understanding of Cybersecurity Engineering/Operations, Incident Response, and GRC functions
• Ability to evaluate the security and threats associated with SaaS solutions
• A firm understanding of product/service management disciplines
• Practical experience with using, deploying, and/or supporting Cyber security tools
• Willingness to provide mentorship to more junior security engineers and analysts within the team
• Empathy for engineering teams with the ability to balance security guidelines and policies with operational needs to maintain desired end-state corporate security posture
• Well-developed organization and time management skillset
• Several years of relevant experience in the above areas; a formal degree is not required

DESIRED CHARACTERISTICS

• Experience securing streaming services and common streaming technologies
• Experience working with legal, privacy, and compliance teams on consumer-facing products
• A strong understanding of common services used in cloud-based architectures with expertise in at least one cloud vendor (AWS, GCP or Azure) and Awareness of Cloud Platform Security and controls
• A strong understanding of secure application development and the tools/techniques used to ensure that the associated threats are mitigated
• Experience addressing consumer data regulations through security controls and solution design
• Experience incorporating regulatory and industry standards into cybersecurity designs (ISO/IEC; PCI DSS, SOX, HIPAA, GDPR, CCPA)

Additional Information

NBCUniversal\'s policy is to provide equal employment opportunities to all applicants and employees without regard to race, color, religion, creed, gender, gender identity or expression, age, national origin or ancestry, citizenship, disability, sexual orientation, marital status, pregnancy, veteran status, membership in the uniformed services, genetic information, or any other basis protected by applicable law. NBCUniversal will consider for employment qualified applicants with criminal histories in a manner consistent with relevant legal requirements, including the City of Los Angeles Fair Chance Initiative For Hiring Ordinance, where applicable.

If you are a qualified individual with a disability or a disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access nbcunicareers.com as a result of your disability. You can request reasonable accommodations in the US by calling 1-818-777-4107 and in the UK by calling +44 2036185726.

NBCUniversal