Senior Cybersecurity Engineer

ITSMF; Atlanta (GA); On-site; USD 140,000 - 170,000; Full time

Job summary

Cox Automotive seeks a Senior Cybersecurity Engineer to protect the enterprise by detecting, investigating, and remediating threats across email, endpoint, identity, cloud, and network environments. This role applies AI to SOC operations, leads cyber projects, and supports customer security efforts with incident response and threat intelligence.

You will monitor and tune SIEM/SOAR platforms, perform threat analysis using MITRE ATT&CK, and collaborate with cross-divisional teams to uplift

Qualifications

• Bachelor's degree or higher with 4+ years in a related field; alternative combos allowed.

Responsibilities

• Respond to and remediate email, endpoint, identity, cloud, AI, and network threats.

Skills

Threat intelligence

Incident response

Digital forensics

Analytical problem-solving

AI in security

Education

Bachelor's degree in a related discipline

Master's degree in a related field

Ph.D. in a related field

Tools

Firewalls

VPN

IDS/IPS

SASE

Secure web proxy

EDR/XDR

SIEM

SOAR

Cloud security products

Zero Trust tooling

MITRE ATT&CK

Job description

Cox Automotive is seeking a Senior Cybersecurity Engineer that will be responsible for protecting the enterprise by detecting, investigating, and remediating internal and external security threats. This role performs advanced threat analysis, threat intelligence gathering and reporting, and incident response; applies AI to streamline SOC operations and improve detection accuracy; and leads Cybersecurity-focused projects. The role also supports customer security initiatives such as investigative support and threat response, as needed.

What You'll Do

Cybersecurity - Cyber Intelligence & Incident Response

• Responds to and remediates email, endpoint, identity, cloud, AI, and network-based threats; provides forensic investigation and support.
• Provides after-hours support as needed for response activities.
• Collaborates with cross-divisional and Cybersecurity teams to continuously improve security capabilities and threat response.
• Leads or assists with projects to implement advanced technologies that prevent and identify malicious behavior across cloud, network, endpoint, identity, and email environments.
• Operates and tunes SIEM, SOAR, threat intelligence platforms, advanced email protection, EDR/XDR, cloud security products, IDS/IPS, Zero Trust tooling, and other security technologies.
• Performs threat analysis using industry-standard frameworks (MITRE ATT&CK, kill chain, diamond model).
• Detects, investigates, and responds to AI-enabled threats, such as AI-generated phishing, social engineering, and automated attack tooling.
• Monitors and helps secure enterprise use of AI, including generative AI tools and agents, against risks such as prompt injection, data leakage, and unauthorized access.
• Uses AI-based tools to accelerate investigation, triage, enrichment, and root-cause analysis.
• Builds AI and automation to streamline SOC processes, such as alert enrichment, case summaries, and playbook execution to reduce response times.
• Supports customer security tasks as needed, such as fraud investigations, in partnership with the customer security team.
• Proposes and helps review security plans and policies to improve enterprise security.
• Maintains and produces metrics, operational playbooks, process diagrams, and documentation for the Cybersecurity program.
• Other duties may be assigned as needed to address new security threats facing the enterprise.

Emerging Threats Monitoring

• Stays current on the latest threats, AI-driven attack techniques, and security trends, and acts quickly to keep enterprise environments protected.

Incident Management

• Assists in the investigation and resolution of security events and incidents, from triage through post-incident review.

Who You Are:

Minimum Requirements:

• Bachelor's degree in a related discipline and 4 years' experience in a related field. The right candidate could also have a different combination, such as a master's degree and 2 years' experience; a Ph.D. and up to 1 year of experience; or 16 years' experience in a related field
• Hands-on experience in threat intelligence and incident response.
• Hands-on experience with industry-standard security technologies such as firewalls, VPN, IDS/IPS, SASE, secure web proxy, EDR/XDR, SIEM, and SOAR.
• Strong digital forensics and analytical problem-solving skills.
• Working knowledge of major cloud platforms (e.g., AWS, Azure, GCP), including their architectures and native security services.
• Proficiency with query and scripting languages (e.g., SPL, KQL, Python, PowerShell) for threat hunting, analysis, and automation

About Cox

Cox empowers employees to build a better future and has been doing so for over 120 years. With exciting investments and innovations across transportation, communications, cleantech and healthcare, our family of businesses - which includes Cox Automotive and Cox Communications - is forging a better future for us all.

Benefits of working at Cox may include health care insurance (medical, dental, vision), retirement planning (401(k)), and paid days off (sick leave, parental leave, flexible vacation/wellness days, and/or PTO). For more details on what benefits you may be offered, visit our benefits page.

Cox is an Equal Employment Opportunity employer - All qualified applicants/employees will receive consideration for employment without regard to that individual's age, race, color, religion or creed, national origin or ancestry, sex (including pregnancy), sexual orientation, gender, gender identity, physical or mental disability, veteran status, genetic information, ethnicity, citizenship, or any other characteristic protected by law.