Sr. Cyber Infrastructure Engineer

NBCUniversal is one of the world's leading media and entertainment companies. We create world-class content, which we distribute across our portfolio of film, television, and streaming, and bring to life through our theme parks and consumer experiences. We own and operate leading entertainment and news brands, including NBC, NBC News, MSNBC, CNBC, NBC Sports, Telemundo, NBC Local Stations, Bravo, USA Network, and Peacock, our premium ad-supported streaming service. We produce and distribute premier filmed entertainment and programming through Universal Filmed Entertainment Group and Universal Studio Group, and have world-renowned theme parks and attractions through Universal Destinations & Experiences. NBCUniversal is a subsidiary of Comcast Corporation.

Our impact is rooted in improving the communities where our employees, customers, and audiences live and work. We have a rich tradition of giving back and ensuring our employees have the opportunity to serve their communities. We champion an inclusive culture and strive to attract and develop a talented workforce to create and deliver a wide range of content reflecting our world.

Comcast NBCUniversal has announced its intent to create a new publicly traded company ('Versant') comprised of most of NBCUniversal's cable television networks, including USA Network, CNBC, MSNBC, Oxygen, E!, SYFY and Golf Channel along with complementary digital assets Fandango, Rotten Tomatoes, GolfNow, GolfPass, and SportsEngine. The well-capitalized company will have significant scale as a pure-play set of assets anchored by leading news, sports and entertainment content. The spin-off is expected to be completed during 2025.

As a senior technical leader within the Versant Cyber Defense Infrastructure organization, you will be at the forefront of safeguarding the company’s digital assets. This is a pivotal, hands-on role where you will architect, build, and run the critical security platforms that defend our web applications and secure the software development lifecycle. You will have the strategic autonomy to shape our technical roadmap, directly protecting the integrity of world-renowned brands and enabling the business to innovate securely. The ideal candidate is a subject matter expert who thrives on solving complex challenges, mentoring talented engineers, and proactively evolving our security posture against emerging threats, and excels at managing strategic partnerships, including the oversight of our Managed Security Service Provider (MSSP).

Responsibilities:

Key areas of focus for the Senior Cyber Infrastructure Engineer include security architecture, platform ownership, operational excellence, and mentorship. The successful candidate will be responsible for the following activities:

• Lead the design, implementation, and administration of core application security systems, including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and cloud-native security tools like Snyk and Wiz.
• Own the strategy and daily operations for application protection platforms, such as web application firewalls (WAFs), Palo Alto firewalls, and bot mitigation services.
• Serve as a primary technical escalation point for complex security issues, providing expert guidance to internal engineering and development teams.
• Act as the primary technical liaison for our Managed Security Service Provider (MSSP), overseeing daily operations, managing technical escalations, and ensuring service delivery aligns with Versant’s security standards. You will be accountable for driving partner productivity, tracking performance against SLAs, and integrating their services into our security workflows.
• Architect and implement resilient, scalable, and automated security solutions across a global, 24x7 enterprise.
• Identify opportunities for and lead the development of automation to improve security workflows and reduce manual tasks.
• Contribute to the long-term strategic roadmap for cyber defense infrastructure by evaluating emerging threats, new technologies, and the application of AI/ML for advanced threat detection.
• Develop and maintain key performance indicators (KPIs) to measure the effectiveness of security controls and report on posture to leadership.
• The Infrastructure Engineering Team is an MSSP and will be responsible
• Mentor junior engineers, foster a strong security culture, and advocate for security best practices across the organization.

• Minimum 5-7 years of experience in a hands-on cybersecurity engineering role.
• Demonstrated expertise in software and application security principles, including secure coding practices, vulnerability management, and DevSecOps integration.
• Deep understanding of web protocols and technologies (HTTP, TLS/SSL, DNS) and network security architecture.
• Extensive experience with at least one major public cloud environment (AWS, Azure, or GCP), including cloud security services and infrastructure-as-code.
• Proficient in at least one scripting or programming language (e.g., Python, PowerShell) for automation and tool integration.
• Excellent verbal and written communication skills, with a proven ability to articulate complex technical concepts to both technical and non-technical stakeholders.
• Demonstrated ability to lead technical projects from concept to completion, solve complex problems with minimal supervision, and make sound decisions under pressure.
• Bachelor’s degree in a relevant field or equivalent work experience.

Desired Characteristics:

• Extensive hands-on experience engineering and managing security tools like CrowdStrike, Palo Alto firewalls, WAFs, Qualys, Snyk, or Wiz.
• Proven experience integrating security tools into CI/CD pipelines and automating security workflows.
• Experience collaborating with cross-functional teams such as DevOps, SRE, and Application Development to embed security into their workflows.
• Familiarity with leveraging Artificial Intelligence (AI) and Machine Learning (ML) in cybersecurity for threat detection and response.
• In-depth knowledge of security compliance frameworks such as NIST, PCI/DSS, or ISO 27001.
• Advanced skills in log analysis, threat hunting, and incident response using monitoring tools (e.g., Splunk SIEM).
• Experience with email security platforms like Proofpoint or brand protection tools like ZeroFox.
• Professional cybersecurity certifications (e.g., CISSP, GCIH, GCIA, or cloud-specific security certs).
• Master's degree in a relevant field.

Additional Requirements: 

• Fully Remote: This position has been designated as fully remote, meaning that the position is expected to be performed from a non-Versant worksite, most commonly an employee’s residence. 

This position is eligible for company sponsored benefits, including medical, dental and vision insurance, 401(k), paid leave, tuition reimbursement, and a variety of other discounts and perks. Learn more about the benefits offered by NBCUniversal by visiting the Benefits page of the Careers website. 

Salary: 125-155K, bonus eligible

We are accepting applications for this position on an ongoing basis. 

As part of our selection process, external candidates may be required to attend an in-person interview with an NBCUniversal employee at one of our locations prior to a hiring decision. NBCUniversal's policy is to provide equal employment opportunities to all applicants and employees without regard to race, color, religion, creed, gender, gender identity or expression, age, national origin or ancestry, citizenship, disability, sexual orientation, marital status, pregnancy, veteran status, membership in the uniformed services, genetic information, or any other basis protected by applicable law.  

If you are a qualified individual with a disability or a disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access nbcunicareers.com as a result of your disability. You can request reasonable accommodations by emailing [email protected].

Although you'll be hired as an NBCU employee, your employment and the responsibilities associated with this job likely will transition to Versant in the future. By joining at this pivotal time, you'll be a part of this exciting company as it takes shape.

For LA County and City Residents Only:  NBCUniversal will consider for employment  qualified applicants with criminal histories, or arrest or conviction records, in a manner  consistent with relevant legal requirements, including the City of Los Angeles' Fair Chance Initiative For Hiring Ordinance, the Los Angeles County Fair Chance Ordinance for Employers, and the California Fair Chance Act, where applicable.