Job Summary

Responsible for validating product quality by analyzing and testing the quality of the codebase. Makes decisions affecting architecture of the test codebase including which software to use for writing test code. Focuses on writing code that will be executed in an automated and repeatable fashion which will reduce manual testing efforts and increase code quality and consistency. Develops and maintains code that validates front-end, middleware and database systems, using the latest tools and common programming languages. Provides input into various software development lifecycle stages. Partners with software engineers to write efficient automation code using coding standards and best practices. Executes automated code and creates comprehensive execution reports for team. Repairs complex broken automation scripts and performs peer reviews of automation codebase. Has in-depth experience, knowledge and skills in own discipline. Usually determines own work priorities. Acts as resource and mentor for colleagues with less experience.

Core Responsibilities

Write automated test code, using the same standards as a Software Engineer, that allows for repeatable, reliable testing solutions to test the wide functionality of products and software, maintaining automation codebase in a version control system (GIT, SVN). May include creating simple SQL queries for validation of databases and / or writing SOAP and RESTful API automated scripts.
Create automated testing documentation, including Test Plans, Test Summary Reports etc.
Execute automated test scripts and presents results to team.
Analyze broken test cases and diagnose and repair to working order.
Perform code reviews of automation scripts and front-end codebases. Diagnose and repair simple bugs within production code.
Serve as a guide and mentor for junior-level engineers. Provides technical leadership and consultation with regards to practices, procedures and techniques.
Consistent exercise of independent judgment and discretion in matters of significance.
Regular, consistent and punctual attendance. Must be able to work nights and weekends, variable schedule(s) as necessary .
Other duties and responsibilities as assigned.
Perform manual application penetration testing at key points in the Software Development Life Cycle (SDLC).
Produce documentation (reports) and present findings from security assessments to stakeholders.
Provide application security consulting services to development teams during critical points in the SDLC.
Stay current within the application security domain and continue education in the field.
5+ years experience performing whitebox application penetration testing (Web, APIs, Thick clients) or equivalent knowledge.
Excellent skills with application security testing tools such as Burpsuite, OWASP ZAP, SQLMap, IDA Pro, Kali, etc.
Experience performing manual application source code security reviews for languages such as Java, Python and C++.
Experience working with containers (Kubernetes) and cloud technologies (GCP preferred).
Experience with UNIX or Linux.
Experience with scripting languages such as Python, bash, Powershell, etc.
Strong passion for application security and willingness to grow skills in this domain.
Self-motivated and proactive in finding answers and sharing learnings with teammates.
Excellent oral and written communication skills.
Collaborates with project stakeholders to identify product and technical requirements. Conducts analysis to determine integration needs.
Designs new software and web applications, supports applications under development and customizes current applications. Develops software update process for existing applications. Assists in the roll-out of software releases.
Trains junior Software Development Engineers on internally developed software applications.
Oversees the researching, writing, and editing of documentation and technical requirements, including evaluation plans, test results, technical manuals and formal recommendations and reports.
Keeps current with technological developments within the industry. Monitors and evaluates competitive applications and products. Reviews literature, patents and current practices relevant to the solution of assigned projects.
Works with Quality Assurance team to determine if applications fit specification and technical requirements.
Displays expertise in knowledge of engineering methodologies, concepts and skills and their application in specified engineering specialty.
Consistent exercise of independent judgment and discretion in matters of significance.

Great to have:

Experience working in a DevSecOps and Continuous Integration/Continuous Delivery (CI/CD) environment.
OSCP/OSWE, GWAPT, GMOB, GPYC, or other relevant security certifications.

Employees at all levels are expected to:

Understand our Operating Principles; make them the guidelines for how you do your job.
Own the customer experience - think and act in ways that put our customers first, give them seamless digital options at every touchpoint, and make them promoters of our products and services.
Know your stuff - be enthusiastic learners, users and advocates of our game-changing technology, products and services, especially our digital tools and experiences.
Win as a team - make big things happen by working together and being open to new ideas.
Be an active part of the Net Promoter System - a way of working that brings more employee and customer feedback into the company - by joining huddles, making call backs and helping us elevate opportunities to do better for our customers.
Drive results and growth.
Respect and promote inclusion & diversity.
Do whats right for each other, our customers, investors and our communities.

Disclaimer:

This information has been designed to indicate the general nature and level of work performed by employees in this role. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications.

Skills

Network Penetration Testing, Penetration Testing, Penetration Testing Software, Web Application Penetration Testing, Wireless Penetration Testing We believe that benefits should connect you to the support you need when it matters most, and should help you care for those who matter most. Thats why we provide an array of options, expert guidance and always-on tools that are personalized to meet the needs of your reality to help support you physically, financially and emotionally through the big milestones and in your everyday life.

Please visit the benefits summary on our careers site for more details.

Education

Bachelors Degree

While possessing the stated degree is preferred, Comcast also may consider applicants who hold some combination of coursework and experience, or who have extensive related professional experience.

Certifications (if applicable)

Relative Work Experience

5-7 Years

Comcast is proud to be an equal opportunity workplace. We will consider all qualified applicants for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, veteran status, genetic information, or any other basis protected by applicable law.

Role: Test Analyst

Industry Type: Telecom / ISP

Department: Engineering - Software & QA

Employment Type: Full Time, Permanent

Role Category: Quality Assurance and Testing

Education

UG: Any Graduate

PG: Any Postgraduate

Quality & Automation Engineer 3