Cybersecurity Engineer II

ITSMF; Atlanta (GA); On-site; USD 90,000 - 120,000; Full time

Job summary

Cox Automotive is seeking a Customer Security Analyst II to identify and defend against threats impacting our enterprise and customers. You will investigate threats, support fraud investigations, and partner with product and cybersecurity teams to reduce customer risk.

You will operate security tools (SIEM, SOAR, EDR) and use AI-driven capabilities to speed investigations, triage, and improve detection. A strong foundation in threat intel and incident response is required.

Qualifications

• Bachelor’s degree in a related discipline.
• 2+ years of threat intelligence or incident response experience.
• Hands-on with industry-standard security technologies.

Responsibilities

• Investigates and responds to threats including account takeover and fraud.
• Provides after-hours support for response activities.
• Partners with teams to reduce customer impact and improve threat response.
• Operates SIEM, SOAR, EDR, and other security tools.
• Produces threat intelligence and fraud reports.
• Maintains metrics and documentation for the customer security program.

Skills

Threat intelligence

Incident response

Digital forensics

Python scripting

PowerShell

Education

Bachelor’s degree in a related discipline

Tools

Firewalls

VPN

IDS/IPS

SASE

EDR/XDR

SIEM

SOAR

AWS

Azure

GCP

Job description

Cox Automotive is seeking a Customer Security Analyst II identifies and defends against existing and emerging threats impacting our enterprise & customers, supports fraud investigations, and partners with business operations and product teams to reduce customer risk. This role helps expand the customer security program across the business by leveraging cybersecurity expertise, advanced technologies, and AI-driven capabilities to improve investigative efficiency and enhance threat detection.

What You'll Do

Customer Security - Threat Detection, Investigation & Response

• Investigates and responds to threats including account takeover, credential abuse, phishing, and fraud; supports fraud investigations and provides forensic support.
• Provides after-hours support as needed for response activities.
• Partners with business, Product and Cybersecurity teams to reduce customer impact and improve threat response.
• Assists with projects to implement technologies and controls that prevent and identify malicious behavior and fraud affecting customers.
• Operates security tools such as SIEM and log analytics, SOAR, threat intelligence, EDR, email protection, cloud security, IDS/IPS, and Zero Trust technologies.
• Performs threat analysis using industry standard frameworks (MITRE ATT&CK, kill chain, diamond model).
• Investigates account compromise by analyzing authentication, API, and application logs to reconstruct attacker activity and identify other affected customers.
• Uses AI-based tools to speed up investigation, triage, and improve problem solving.
• Uses AI and automation to streamline SOC processes and improve threat detection, including detection logic and fraud signals.
• Turns threat findings into detections and protections, enhancing the customer security program.
• Proposes and helps review security plans, policies, and customer protections.
• Maintains metrics, playbooks, and documentation for the customer security program, including fraud trends.
• Produces threat intelligence and fraud reports for security, business, and product stakeholders.

Emerging Threats Monitoring

• Stays current on emerging threats, fraud schemes, and AI-driven attack techniques targeting customers, and acts quickly to keep customers and the enterprise protected.

Incident Management

• Assists in the investigation and resolution of security events and incidents.

Who You Are

Minimum Requirements

• Bachelor's degree in a related discipline and 2+ years' experience in a related field. The right candidate could also have a different combination, such as a master's degree and up to 2 years' experience; or 14 years' experience in a related field
• Hands-on experience in threat intelligence and incident response.
• Hands-on experience with industry-standard security technologies such as firewalls, VPN, IDS/IPS, SASE, secure web proxy, EDR/XDR, SIEM, and SOAR.
• Strong digital forensics and analytical problem-solving skills.
• Working knowledge of major cloud platforms (e.g., AWS, Azure, GCP), including their architectures and native security services.
• Proficiency with query and scripting languages (e.g., SPL, KQL, Python, PowerShell) for threat hunting, analysis, and automation.

About Cox

Cox empowers employees to build a better future and has been doing so for over 120 years. With exciting investments and innovations across transportation, communications, cleantech and healthcare, our family of businesses - which includes Cox Automotive and Cox Communications - is forging a better future for us all. Ready to make your mark? Join us today!

------------

Benefits of working at Cox may include health care insurance (medical, dental, vision), retirement planning (401(k)), and paid days off (sick leave, parental leave, flexible vacation/wellness days, and/or PTO). For more details on what benefits you may be offered, visit our benefits page.

Cox is an Equal Employment Opportunity employer - All qualified applicants/employees will receive consideration for employment without regard to that individual's age, race, color, religion or creed, national origin or ancestry, sex (including pregnancy), sexual orientation, gender, gender identity, physical or mental disability, veteran status, genetic information, ethnicity, citizenship, or any other characteristic protected by law.