AI-Driven Cyber Threat Engineer & Incident Response Lead

Cox Enterprises; Atlanta (GA); On-site; USD 120,000 - 160,000; Full time

Job summary

Cox Automotive is seeking a Senior Cybersecurity Engineer to protect the enterprise by detecting, investigating, and remediating threats across email, endpoint, identity, cloud, and network environments. You will apply AI to SOC operations, perform threat analysis, and lead cybersecurity projects.

Responsibilities include responding to threats, conducting forensics, tuning SIEM/SOAR, and supporting customer security programs while collaborating with cross-functional teams.

Qualifications

• Bachelor's degree with 4+ years of related experience; or alternative combos as noted.
• Hands-on threat intelligence and incident response experience.
• Hands-on with security tech: firewalls, VPN, IDS/IPS, SASE, secure web proxy, EDR/XDR, SIEM, SOAR.
• Strong digital forensics and analytical problem-solving skills.
• Cloud platforms (AWS, Azure, GCP) and native security services.
• Scripting for threat hunting and automation (Python, PowerShell, KQL).

Responsibilities

• Responds to and remediates email, endpoint, identity, cloud, AI, and network threats; conducts forensic investigations.
• Provides after-hours support for response activities.
• Collaborates with cross-divisional Cybersecurity teams to improve threat response.
• Leads or assists with projects implementing advanced technologies across cloud, network, endpoint, identity, and email environments.
• Operates and tunes SIEM, SOAR, threat intelligence platforms, EDR/XDR, and cloud security products.
• Performs threat analysis using MITRE ATT&CK, kill chain, and diamond model.
• Detects and responds to AI-enabled threats including phishing and automation-based attacks.
• Monitors AI usage and generative AI risks; protects data and access.
• Builds AI/automation to streamline SOC processes like alert enrichment and playbook execution.
• Supports customer security tasks in coordination with customer security teams.
• Proposes and reviews security plans and policies; maintains program documentation.

Skills

Threat intelligence

Incident response

SIEM

SOAR

EDR/XDR

Cloud security

AI in security

Python

PowerShell

KQL

SPL

IDS/IPS

Zero Trust

MITRE ATT&CK

Kill chain

Diamond model

Forensics

Education

Bachelor's degree in a related discipline

Tools

Firewalls

VPN

IDS/IPS

SASE

Secure web proxy

Job description

Cox Automotive is seeking a Senior Cybersecurity Engineer to protect the enterprise by detecting, investigating, and remediating threats across email, endpoint, identity, cloud, and network environments. You will apply AI to SOC operations, perform threat analysis, and lead cybersecurity projects.

Responsibilities include responding to threats, conducting forensics, tuning SIEM/SOAR, and supporting customer security programs while collaborating with cross-functional teams.