Hybrid Senior Cybersecurity Engineer: Threat Intel & IR

CAI Cox Automotive Corp Svcs., LLC; Atlanta (GA); Hybrid; USD 102,000 - 169,000; Full time

Benefits offered by this job

Hybrid work arrangement

Paid time off

Health insurance

Training & development

Job summary

Cox Automotive is seeking a Senior Cybersecurity Engineer to protect the enterprise by detecting, investigating, and remediating threats across email, endpoints, cloud, and networks. You will apply AI to SOC operations, lead cybersecurity projects, and support customer security tasks as needed.

The role requires hands-on threat intelligence and incident response experience, proficiency with security tech (firewalls, VPN, IDS/IPS, SASE, EDR/XDR, SIEM, SOAR), and cloud platforms.

Qualifications

• Bachelor’s degree in a related discipline or equivalent.
• 4+ years of experience in threat intelligence and incident response.
• Hands-on experience with industry-standard security technologies (firewalls, VPN, IDS/IPS, SASE, secure web proxy, EDR/XDR, SIEM, SOAR).
• Strong digital forensics and analytical problem-solving skills.

Responsibilities

• Responds to and remediates email, endpoint, identity, cloud, AI, and network threats; provides forensic investigation support.
• Collaborates with cross-divisional Cybersecurity teams to improve threat response.
• Leads projects to implement advanced security technologies across cloud, network, endpoint, and identity environments.
• Operates SIEM, SOAR, threat intelligence platforms; tunes and improves detections.

Skills

Threat intelligence

Incident response

SIEM/SOAR

EDR/XDR

Cloud security

Scripting (Python, PowerShell, SPL, KQ

Education

Bachelor’s degree in a related discipline

Tools

Firewalls

VPN

IDS/IPS

SASE

Secure web proxy

EDR/XDR

SIEM

SOAR

Job description

Cox Automotive is seeking a Senior Cybersecurity Engineer to protect the enterprise by detecting, investigating, and remediating threats across email, endpoints, cloud, and networks. You will apply AI to SOC operations, lead cybersecurity projects, and support customer security tasks as needed.

The role requires hands-on threat intelligence and incident response experience, proficiency with security tech (firewalls, VPN, IDS/IPS, SASE, EDR/XDR, SIEM, SOAR), and cloud platforms.