Cybersecurity Engineer II

Cybersecurity Jobs; Atlanta (GA); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Health care insurance

401(k) retirement plan

Paid time off

Job summary

Cox Automotive is seeking a security professional to join our team in Atlanta, GA onsite. You will investigate threats, support fraud investigations, and collaborate with cross-functional teams to strengthen protection for customers and the enterprise.

The role requires hands-on experience in threat intelligence, incident response, and security technologies such as SIEM, SOAR, EDR/XDR, and cloud security. You will work with cloud platforms (AWS/Azure/GCP) and scripting languages like Python and

Qualifications

• Bachelor’s degree in a related discipline and 2+ years of experience in a related field; or a master’s degree with up to 2 years of experience; or 14 years of experience.
• Hands-on experience in threat intelligence and incident response.
• Hands-on experience with security technologies such as firewalls, VPN, IDS/IPS, SASE, secure web proxy, EDR/XDR, SIEM, and SOAR.
• Strong digital forensics and analytical problem-solving skills.
• Working knowledge of AWS, Azure, and GCP cloud platforms and their native security services.
• Proficiency with query and scripting languages such as SPL, KQL, Python, and PowerShell.

Responsibilities

• Investigate and respond to threats such as account takeover, credential abuse, phishing, and fraud, including forensic support for investigations.
• Provide after-hours support as needed.
• Collaborate with Business, Product, and Cybersecurity teams to reduce customer impact and improve threat response.
• Assist with projects to implement technologies and controls that prevent and identify malicious behavior and fraud.
• Operate and support security tools including SIEM, SOAR, threat intelligence, EDR, email protection, cloud security, IDS/IPS, and Zero Trust technologies.
• Perform threat analysis using MITRE ATT&CK, kill chain, and diamond model.
• Investigate account compromise by analyzing authentication, API, and application logs.
• Use AI-based tools to accelerate investigation, triage, and problem solving.
• Apply AI and automation to streamline SOC processes and improve threat detection.
• Turn threat findings into detection and protection enhancements for the customer security program.
• Propose and help review security plans, policies, and protections.
• Maintain metrics, playbooks, and documentation for the customer security program.
• Stay current on emerging threats and assist with investigation of security incidents.

Skills

Threat intelligence

Incident response

Cloud security

Digital forensics

Scripting (Python/PowerShell)

Education

Bachelor’s degree in a related field

Master’s degree (optional)

Tools

SIEM

SOAR

EDR/XDR

IDS/IPS

KQL

Job description

Join a security team at Cox Automotive that helps protect customers and the enterprise by identifying and defending against threats that impact Cox Automotive and its users. This onsite Atlanta, GA role supports fraud investigations and strengthens the customer security program through advanced technologies and AI-driven capabilities, working closely with business, product, and cybersecurity stakeholders.

What You’ll Do

• Investigate and respond to threats such as account takeover, credential abuse, phishing, and fraud, including providing forensic support for fraud investigations.
• Support response activities through after-hours support as needed.
• Partner with Business, Product, and Cybersecurity teams to reduce customer impact and improve threat response.
• Assist with projects to implement technologies and controls that prevent and identify malicious behavior and fraud affecting customers.
• Operate and support security tools including SIEM and log analytics, SOAR, threat intelligence, EDR, email protection, cloud security, IDS/IPS, and Zero Trust technologies.
• Perform threat analysis using industry-standard frameworks such as MITRE ATT&CK, kill chain, and diamond model.
• Investigate account compromise by analyzing authentication, API, and application logs to reconstruct attacker activity and identify other affected customers.
• Use AI-based tools to accelerate investigation, triage, and improve problem solving.
• Apply AI and automation to streamline SOC processes and improve threat detection, including detection logic and fraud signals.
• Turn threat findings into detection and protection enhancements that strengthen the customer security program.
• Propose and help review security plans, policies, and customer protections.
• Maintain metrics, playbooks, and documentation for the customer security program, including fraud trends, and produce threat intelligence and fraud reports for security, business, and product stakeholders.
• Stay current on emerging threats, fraud schemes, and AI-driven attack techniques targeting customers, and assist with investigation and resolution of security events and incidents.

What You Bring

• Bachelor’s degree in a related discipline and 2+ years of experience in a related field; or a different combination such as a master’s degree and up to 2 years experience; or 14 years experience in a related field.
• Hands-on experience in threat intelligence and incident response.
• Hands-on experience with industry-standard security technologies such as firewalls, VPN, IDS/IPS, SASE, secure web proxy, EDR/XDR, SIEM, and SOAR.
• Strong digital forensics and analytical problem-solving skills.
• Working knowledge of major cloud platforms, including AWS, Azure, and GCP, along with architectures and native security services.
• Proficiency with query and scripting languages such as SPL, KQL, Python, and PowerShell for threat hunting, analysis, and automation.

Tools and Technologies

SIEM, log analytics, SOAR, threat intelligence, EDR, email protection, cloud security, IDS/IPS, Zero Trust technologies, MITRE ATT&CK, kill chain, diamond model, AI-based tools, AI and automation, SASE, secure web proxy, EDR/XDR, firewalls, VPN, AWS, Azure, GCP, SPL, KQL, Python, PowerShell.

Benefits

• Health care insurance (medical, dental, vision)
• Retirement planning (401(k))
• Paid days off (sick leave, parental leave, flexible vacation/wellness days, and/or PTO)