Cybersecurity Engineer II

Cybersecurity Jobs; New York (NY); On-site; USD 89,000 - 134,000; Full time

Benefits offered by this job

Paid holidays

Wellness stipend

Paid time off

Bereavement leave

Voting leave

Volunteer time off

Military leave

Parental leave

Job summary

Cox Automotive in Long Island, NY is seeking a security analyst to protect enterprise customers from evolving threats. This onsite role supports fraud investigations and strengthens the customer security program using advanced cybersecurity capabilities and AI-driven tools.

You will investigate threats, perform forensics, and partner with product and cybersecurity teams to reduce customer risk and improve response outcomes.

Qualifications

• Bachelor’s degree or higher in a related field with 2+ years of relevant experience or a master’s degree with up to 2 years of experience
• Hands‑on experience in threat intelligence and incident response
• Hands‑on experience with industry‑standard security technologies including firewalls, VPN, IDS/IPS, SASE, secure web proxy, EDR/XDR, SIEM, and SOAR
• Strong digital forensics and analytical problem‑solving skills
• Working knowledge of cloud platforms (AWS, Azure, GCP) and native security services
• Proficiency with query and scripting languages such as SPL, KQL, Python, and PowerShell

Responsibilities

• Investigate threats such as account takeover, credential abuse, phishing, and fraud; provide forensic support for investigations
• Provide after-hours support as needed to assist response activities
• Partner with business, Product, and Cybersecurity teams to reduce customer impact and improve threat response
• Assist with projects implementing technologies and controls to prevent and identify malicious behavior and fraud
• Operate and leverage security tools such as SIEM and log analytics, SOAR, threat intelligence, EDR, email protection, cloud security, IDS/IPS, and Zero Trust
• Perform threat analysis using MITRE ATT&CK, kill chain, and the diamond model
• Investigate account compromise by analyzing authentication, API, and application logs to reconstruct attacker activity
• Use AI-based tools to accelerate investigation, triage, and SOC processes
• Translate findings into detections and protections for the customer security program
• Propose and review security plans, policies, and protections
• Maintain metrics, playbooks, and documentation for the customer security program
• Produce threat intelligence and fraud reports for stakeholders
• Stay current on emerging threats and AI-driven attack techniques
• Assist in investigation and resolution of security events and incidents

Skills

Threat intelligence

Incident response

Digital forensics

PowerShell

Python

KQL

SPL

Education

Bachelor’s degree in a related discipline

Master’s degree (with up to 2 years experience)

14 years experience in related field

Tools

SIEM

SOAR

EDR/XDR

Firewalls

VPN

IDS/IPS

SASE

Cloud security (AWS/Azure/GCP)

Job description

Join Cox Automotive to help protect enterprise customers against evolving threats. In this onsite role on Long Island, NY, you’ll support fraud investigations and strengthen the customer security program using advanced cybersecurity capabilities and AI-driven tools.

The work centers on identifying and defending against existing and emerging threats impacting customers, with collaboration across business, Product, and Cybersecurity teams to reduce customer risk and improve response outcomes.

What you’ll do

• Investigate and respond to threats such as account takeover, credential abuse, phishing, and fraud, including providing forensic support for fraud investigations.
• Provide after-hours support as needed to support response activities.
• Partner with business, Product, and Cybersecurity teams to reduce customer impact and improve threat response.
• Assist with projects that implement technologies and controls to prevent and identify malicious behavior and fraud affecting customers.
• Operate and leverage security tools such as SIEM and log analytics, SOAR, threat intelligence, EDR, email protection, cloud security, IDS/IPS, and Zero Trust technologies.
• Perform threat analysis using industry frameworks including MITRE ATT&CK, kill chain, and the diamond model.
• Investigate account compromise by analyzing authentication, API, and application logs to reconstruct attacker activity and identify other impacted customers.
• Use AI-based tools to accelerate investigation, triage, and problem-solving, and to streamline SOC processes and improve threat detection (including detection logic and fraud signals).
• Translate findings into detections and protections that enhance the customer security program.
• Propose and help review security plans, policies, and customer protections.
• Maintain metrics, playbooks, and documentation for the customer security program, including fraud trends.
• Produce threat intelligence and fraud reports for security, business, and product stakeholders.
• Stay current on emerging threats, fraud schemes, and AI-driven attack techniques targeting customers, and act quickly to protect both customers and the enterprise.
• Assist in the investigation and resolution of security events and incidents.

Required qualifications

• Bachelor’s degree in a related discipline and 2+ years of experience in a related field. Alternative combinations may include a master’s degree with up to 2 years experience, or 14 years experience in a related field.
• Hands‑on experience in threat intelligence and incident response.
• Hands‑on experience with industry‑standard security technologies including firewalls, VPN, IDS/IPS, SASE, secure web proxy, EDR/XDR, SIEM, and SOAR.
• Strong digital forensics and analytical problem‑solving skills.
• Working knowledge of major cloud platforms (e.g., AWS, Azure, GCP), including architectures and native security services.
• Proficiency with query and scripting languages such as SPL, KQL, Python, and PowerShell for threat hunting, analysis, and automation.

Technologies you may work with

• SIEM, log analytics, SOAR, threat intelligence, EDR, email protection, cloud security, IDS/IPS, Zero Trust
• MITRE ATT&CK, kill chain, diamond model
• Authentication logs, API logs, application logs
• Firewalls, VPN, SASE, secure web proxy
• EDR/XDR, AWS, Azure, GCP
• SPL, KQL, Python, PowerShell

Compensation

Base salary range: $89,400 to $134,000 per year. The final base pay may vary based on the location and the selected candidate’s knowledge, skills, and abilities.

The position may be eligible for additional compensation that may include an incentive program.

Benefits

• Flexibility to take as much vacation with pay as consistent with duties, company needs, and obligations
• Seven paid holidays throughout the calendar year
• Up to 160 hours of paid wellness annually for your own wellness or that of family members
• Additional paid time off including bereavement leave
• Time off to vote
• Jury duty leave
• Volunteer time off
• Military leave
• Parental leave