Engineer 3 - Cyber Security Tester

Comcast brings together the best in media and technology. We drive innovation to create the world's best entertainment and online experiences. As a Fortune 50 leader, we set the pace in a variety of innovative and fascinating businesses and create career opportunities across a wide range of locations and disciplines. We are at the forefront of change and move at an amazing pace, thanks to our remarkable people, who bring cutting-edge products and services to life for millions of customers every day. If you share in our passion for teamwork, our vision to revolutionize industries and our goal to lead the future in media and technology, we want you to fast-forward your career at Comcast. Job Summary Sky TSS – Group Cyber is looking for a Penetration Tester to support the Head of Security Testing in protecting the confidentiality, integrity and availability of Sky’s key information assets and ensure Sky meets the growing demand of internal penetration testing needs. Candidate will be responsible for performing various security assessments, educating the Sky’s business on the inherent risks, and providing meaningful hardening and mitigation strategies. Job responsibilities include strong focus on web-based and mobile application penetration tests, network penetration tests, logical security audits, and hands-on technical security evaluations and remediation advice. Additionally, the candidate will be expected to develop subject matter expertise or focused capabilities in the topics of application security, wireless security, or database and development security. Assignments and skills required include the ability to perform and manage application security assessments, penetration testing, data leakage, network and system forensics, and testing the design and effectiveness of security controls of Internet systems, networks and applications. The candidate will also need to be supporting Sky’s Payment Card Industry/Data Security Standard (PCI/DSS) to analyse & access the risk, impact of exploits and security vulnerabilities, and to initiate the remedial actions required to mitigate the risk to Sky’s platforms, services and systems. As a member of the TSS – Group Cyber team, the candidate will be required to be a thought leader within selected information security practices, have proven experience in development and maintenance of security operations, and have a strong understanding of technology risks with an ability to identify mitigating controls. The individual must have a strong sense of responsibility, along with a healthy degree of scepticism. In view of the sensitivity of the task, the person should be extremely trustworthy, have an understanding of the politics of relationships and have a degree of pragmatism to be able to balance the ideal with the requirements of the business. Job Description Core Responsibilities Key responsibilities: 1. Deliver Security Testing Technical Consultancy support across Departments / Programmes of work. · Performing penetration tests and vulnerability assessments on Sky’s company assets and where necessary 3rd Parties. · Performing application security penetration and vulnerability testing against Sky’s applications. · Work with developers. Have a direct impact on projects and applications. Identify issues and enhance security. · Respond to cutting edge threats facing the business. o Simulate real life Hacking attacks o Get involved in a variety of Security Projects · Learn & develop within multiple areas of Information security. · Working with the Director of Security Services and leading Security experts in, Pentesting, PCI, Security Architecture, Security Management and Security Operations. · Creating, maintaining, and presenting metrics that measure the effectiveness of the application risk management efforts over time. · Performing research as necessary on reported issues and emerging risks to identify best-practice solutions. · Providing consultancy and support to Sky’s projects and initiatives. · Coordinating and overseeing the work of third parties who may conduct additional penetration tests and vulnerability assessments. · Recommending and scoping technical solutions not already in place in addressing security vulnerabilities. · Participate in on-going research and development of a penetration testing lab and processes. · Provide value added, high impact IT and security consulting services to our diverse business. · Working closely with development and architecture teams to define security requirements, build secure architecture design models, and drive security initiatives. · Web Application Penetration Testing – End User Environment · Testing a diverse range of Applications, Devices and systems. o Manual Web App testing for SQL injection, XSS, CSRF, Broken Auth & Session Management, Buffer overflows, OWASP top 10 etc. o Mobile Application Security testing of Android & IOS Devices 2. Supporting compliance, PCI/DSS, SAO, Group cyber security policies, standards and controls. · Contribute to the promotion of Group Cyber Security Policies and Standards through all communication channels including Sky Intranet and targeted meetings. · Assist in the review of control environments · Help review PCI/DSS and SAO security related technical designs and solutions to ensure they are fit for purpose. · Perform and support PCI penetration tests and remediation efforts Employees at all levels are expected to: Understand our Operating Principles; make them the guidelines for how you do your job. Own the customer experience - think and act in ways that put our customers first, give them seamless digital options at every touchpoint, and make them promoters of our products and services. Know your stuff - be enthusiastic learners, users and advocates of our game-changing technology, products and services, especially our digital tools and experiences. Win as a team - make big things happen by working together and being open to new ideas. Be an active part of the Net Promoter System - a way of working that brings more employee and customer feedback into the company - by joining huddles, making call backs and helping us elevate opportunities to do better for our customers. Drive results and growth. Respect and promote inclusion & diversity. Do what's right for each other, our customers, investors and our communities. Disclaimer: This information has been designed to indicate the general nature and level of work performed by employees in this role. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications. Comcast is an EOE/Veterans/Disabled/LGBT employer. Education Bachelor's Degree While possessing the stated degree is preferred, Comcast also may consider applicants who hold some combination of coursework and experience, or who have extensive related professional experience. Relevant Work Experience 5-7 Years Base pay is one part of the Total Rewards that Comcast provides to compensate and recognize employees for their work. Most sales positions are eligible for a Commission under the terms of an applicable plan, while most non-sales positions are eligible for a Bonus. Additionally, Comcast provides best-in-class Benefits. We believe that benefits should connect you to the support you need when it matters most, and should help you care for those who matter most. That’s why we provide an array of options, expert guidance and always-on tools, that are personalized to meet the needs of your reality – to help support you physically, financially and emotionally through the big milestones and in your everyday life. Please visit the compensation and benefits summary on our careers site for more details.