Sr. Cybersecurity Analyst - Application/Cloud Security Automation - Hybrid 2 Days Chicago, IL - FreeWheel

About the role

FreeWheel, a Comcast company, provides comprehensive ad platforms for publishers, advertisers, and media buyers. Powered by premium video content, robust data, and advanced technology, we're making it easier for buyers and sellers to transact across all screens, data types, and sales channels. As a global company, we have offices in nine countries and can insert advertisements around the world.

Job Summary

This role will design, implement, and operate scalable application and cloud security automation across FreeWheel's software development lifecycle. This job ensures the integrity and protection of corporate information systems by identifying and mitigating security vulnerabilities. It includes auditing, analyzing, and implementing security measures. The role collaborates with teams to fortify data systems and educates users on security protocols. The role requires independent problem-solving and strategic planning in information security.

About the role

• Automate designing and maintaining the code-scanning architecture, including how SAST, software composition analysis, secret detection, cloud security checks, and approved frontier-model capabilities integrate with CI/CD pipelines and repository structures.
• Aligning FreeWheel's code/cloud security posture with Comcast security standards, service-level agreements, risk thresholds, compliance requirements, and risk-management frameworks.
• Integrating application and cloud security results into security portals, compliance reporting, vulnerability reporting, operational dashboards, and executive scorecards.
• Collaborating with cross-functional teams to integrate security measures into new and existing systems
• Conducting risk assessments to identify vulnerabilities and recommending mitigation strategies
• Developing and maintaining incident response protocols, including investigating and resolving security breaches
• Designing and implementing security controls to proactively detect and prevent security gaps based on NIST and other frameworks.
• Analyzing security hardware and software changes to assess impact and ensure compliance with industry practices
• Researching and implementing approved tactical and strategic information security plans
• Leading security awareness and training initiatives to promote a culture of security resilience
• Auditing data systems to ensure high visibility of information security precautions in system design
• Collaborating with Information Security leadership to address security gaps and weaknesses
• Adapting to variable schedules, including nights and weekends, as necessary for security operations
• Consistent exercise of independent judgment and discretion in matters of significance.
• Regular, consistent and punctual attendance. Must be able to work nights and weekends, variable schedule(s) as necessary.
• Other duties and responsibilities as assigned.

Qualifications

• 5-7+ years of experience in application security, DevSecOps, secure software engineering, cloud security / infrastructure security / security operations, preferably in AWS-heavy environments or a closely related discipline.
• Experience integrating to enterprise security tooling (CSPMs, CAASMs, SIEMs, Vulnerability Management, etc.) to assess security posture and alert and/or automatically resolve on issues using a risk-based approach.
• Strong knowledge of Python or similar languages to drive automation amongst various security and engineering/SRE systems
• Proven experience using AI tools both for development and delivering application and infrastructure security solutions in an enterprise context.
• ISC2 CISSP/CCSP or similar security certifications is a plus

Employees at all levels are expected to

• Understand our Operating Principles; make them the guidelines for how you do your job.
• Own the customer experience think and act in ways that put our customers first, give them seamless digital options at every touchpoint, and make them promoters of our products and services.
• Know your stuff be enthusiastic learners, users and advocates of our game-changing technology, products and services, especially our digital tools and experiences.
• Win as a team make big things happen by working together and being open to new ideas.
• Be an active part of the Net Promoter System a way of working that brings more employee and customer feedback into the company by joining huddles, making call backs and helping us elevate opportunities to do better for our customers.
• Drive results and growth.
• Support a culture of inclusion in how you work and lead.
• Do what's right for each other, our customers, investors and our communities.

Illinois Pay Range

$107,243.85 - $160,865.77

Comcast intends to offer the selected candidate base pay within this range, dependent on job-related, non-discriminatory factors such as experience. The application window is 30 days from the date job is posted, unless the number of applicants requires it to close sooner or later.

Base pay is one part of the Total Rewards that Comcast provides to compensate and recognize employees for their work. Most sales positions are eligible for a Commission under the terms of an applicable plan, while most non-sales positions are eligible for a Bonus. Additionally, Comcast provides best-in-class Benefits to eligible employees.

We believe that benefits should connect you to the support you need when it matters most, and should help you care for those who matter most. That's why we provide an array of options, expert guidance and always-on tools, that are personalized to meet the needs of your reality - to help support you physically, financially and emotionally through the big milestones and in your everyday life.

Please visit the compensation and benefits summary on our careers site for more details.

Education

Bachelor's Degree

While possessing the stated degree is preferred, Comcast also may consider applicants who hold some combination of coursework and experience, or who have extensive related professional experience.

• Certifications (if applicable)
• Relevant Work Experience
• 7-10 Years