Hybrid Senior Cybersecurity Engineer - Threat Intel & IR

Cox; Atlanta (GA); Hybrid; USD 102,000 - 169,000; Full time

Benefits offered by this job

Paid time off

Paid holidays

Wellness days

Bereavement leave

Volunteer time off

Parental leave

Job summary

Cox Automotive in USA is seeking a Cybersecurity Senior Engineer to lead threat intelligence and incident response activities across cloud, network, and endpoint environments. You will perform investigations, coordinate with cross-functional teams, and help strengthen defenses.

The role requires hands-on security experience, cloud platform knowledge, and scripting skills. This hybrid position offers opportunities to influence security policy and accelerate response through automation.

Qualifications

• Bachelor’s degree in a related discipline with 4 years’ related experience, or alternative combinations as stated.
• Hands-on threat intelligence and incident response experience.
• Experience with security technologies: firewalls, VPN, IDS/IPS, SASE, secure web proxy, EDR/XDR, SIEM, SOAR.
• Knowledge of major cloud platforms and scripting languages.

Responsibilities

• Responds to and remediates email, endpoint, identity, cloud, AI, and network-based threats; provides forensic investigation and support.
• Provides after-hours support as needed for response activities.
• Collaborates with cross-divisional and Cybersecurity teams to continuously improve security capabilities and threat response.
• Leads or assists with projects to implement advanced technologies that prevent and identify malicious behavior across cloud, network, endpoint, identity, and email environments.
• Operates and tunes SIEM, SOAR, threat intelligence platforms, advanced email protection, EDR/XDR, cloud security products, IDS/IPS, Zero Trust tooling, and other security technologies.
• Performs threat analysis using industry-standard frameworks (MITRE ATT&CK, kill chain, diamond model).
• Detects, investigates, and responds to AI-enabled threats, such as AI-generated phishing, social engineering, and automated attack tooling.
• Monitors and helps secure enterprise use of AI, including generative AI tools and agents, against risks such as prompt injection, data leakage, and unauthorized access.
• Uses AI-based tools to accelerate investigation, triage, enrichment, and root-cause analysis.
• Builds AI and automation to streamline SOC processes, such as alert enrichment, case summaries, and playbook execution to reduce response times.
• Supports customer security tasks as needed, such as fraud investigations, in partnership with the customer security team.
• Proposes and helps review security plans and policies to improve enterprise security.
• Maintains and produces metrics, operational playbooks, process diagrams, and documentation for the Cybersecurity program.
• Other duties may be assigned as needed to address new security threats facing the enterprise.

Skills

Threat intelligence

Incident response

Cloud platforms

Scripting

Forensics

SIEM/SOAR

EDR/XDR

Networking security basics

Education

Bachelor’s degree in a related discipline

Tools

Firewalls

VPN

IDS/IPS

SASE

Secure web proxy

EDR/XDR

SIEM

SOAR

Job description

Cox Automotive in USA is seeking a Cybersecurity Senior Engineer to lead threat intelligence and incident response activities across cloud, network, and endpoint environments. You will perform investigations, coordinate with cross-functional teams, and help strengthen defenses.

The role requires hands-on security experience, cloud platform knowledge, and scripting skills. This hybrid position offers opportunities to influence security policy and accelerate response through automation.