Hybrid Cybersecurity Threat Detection Engineer II

Cox Enterprises; Atlanta (GA); Hybrid; USD 89,000 - 134,000; Full time

Benefits offered by this job

Health insurance

401(k)

Paid time off

Holidays

Wellness program

Job summary

Cox Automotive is hiring a Cybersecurity Engineer II to detect, investigate, and respond to security threats affecting our enterprise and customers. The role focuses on threat detection, incident response, and collaboration with product and operations to strengthen protections.

You'll work with SIEM, SOAR, EDR/XDR, and cloud security tools in a hybrid environment, developing detections and threat intelligence while maintaining playbooks and metrics for ongoing improvements.

Qualifications

• Bachelor’s degree or higher in a related discipline with 2+ years’ experience.
• Hands-on experience in threat intelligence and incident response.
• Experience with security technologies (firewalls, VPN, IDS/IPS, SASE, EDR, SIEM, SOAR).
• Strong forensics and analytical problem solving.
• Cloud familiarity (AWS/Azure/GCP) and security services.
• Proficiency with query and scripting languages for threat hunting and automation.

Responsibilities

• Detect, investigate, and respond to threats across enterprise and customer environments.
• Operate security tools (SIEM, SOAR, EDR) and conduct threat analyses.
• Collaborate with product, security, and operations to reduce risk and improve detections.
• Produce threat intel and reports for stakeholders.
• Maintain playbooks, metrics, and documentation for the customer security program.

Skills

Threat intelligence

Incident response

SIEM/SOAR

EDR/XDR

Cloud security (AWS/Azure/GCP)

Scripting (Python, PowerShell, SPL, KQ

Education

Bachelor’s degree in related field

Tools

SIEM

SOAR

EDR/XDR

Job description

Cox Automotive is hiring a Cybersecurity Engineer II to detect, investigate, and respond to security threats affecting our enterprise and customers. The role focuses on threat detection, incident response, and collaboration with product and operations to strengthen protections.

You'll work with SIEM, SOAR, EDR/XDR, and cloud security tools in a hybrid environment, developing detections and threat intelligence while maintaining playbooks and metrics for ongoing improvements.