Comcast Cybersecurity: Director, Security Operations and Incident Response
Core
Lead enterprise cyber defense, scaling the SOC, incident response, threat hunting, and detection capabilities to manage high-impact threats and major incidents.
Role type
Director, Security Operations and Incident Response
Builds
Enterprise cyber defense function, SOC operating model, incident response capabilities, threat detection strategy, and security tooling/pipelines.
Domain
Cybersecurity, Enterprise Security Operations
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
Strategic leadership, incident command, threat hunting, detection engineering, SIEM/EDR/Cloud security, adversary tradecraft, executive communication, team scaling, metrics definition, vendor management.
Preferred skills
CISSP, CISM, GIAC certifications (GCIH, GCIA, GCFA, GNFA, GMON).
Technologies
SIEM, EDR, MITRE ATT&CK, automation, data pipelines, dashboards.
Responsibilities
Lead and scale SOC, IR, and threat hunting functions; serve as senior incident commander for high-severity events; build operating models and surge capacity; partner with engineering to improve tools and workflows; establish executive reporting on security metrics.
Seniority
Director, strategic leadership with hands-on operational oversight
