Senior Cybersecurity Engineer

Cox Enterprises; Atlanta (GA); On-site; USD 120,000 - 160,000; Full time

Job summary

Cox Automotive is seeking a Senior Cybersecurity Engineer to protect the enterprise by detecting, investigating, and remediating threats across email, endpoint, identity, cloud, and network environments. You will apply AI to SOC operations, perform threat analysis, and lead cybersecurity projects.

Responsibilities include responding to threats, conducting forensics, tuning SIEM/SOAR, and supporting customer security programs while collaborating with cross-functional teams.

Qualifications

• Bachelor's degree with 4+ years of related experience; or alternative combos as noted.
• Hands-on threat intelligence and incident response experience.
• Hands-on with security tech: firewalls, VPN, IDS/IPS, SASE, secure web proxy, EDR/XDR, SIEM, SOAR.
• Strong digital forensics and analytical problem-solving skills.
• Cloud platforms (AWS, Azure, GCP) and native security services.
• Scripting for threat hunting and automation (Python, PowerShell, KQL).

Responsibilities

• Responds to and remediates email, endpoint, identity, cloud, AI, and network threats; conducts forensic investigations.
• Provides after-hours support for response activities.
• Collaborates with cross-divisional Cybersecurity teams to improve threat response.
• Leads or assists with projects implementing advanced technologies across cloud, network, endpoint, identity, and email environments.
• Operates and tunes SIEM, SOAR, threat intelligence platforms, EDR/XDR, and cloud security products.
• Performs threat analysis using MITRE ATT&CK, kill chain, and diamond model.
• Detects and responds to AI-enabled threats including phishing and automation-based attacks.
• Monitors AI usage and generative AI risks; protects data and access.
• Builds AI/automation to streamline SOC processes like alert enrichment and playbook execution.
• Supports customer security tasks in coordination with customer security teams.
• Proposes and reviews security plans and policies; maintains program documentation.

Skills

Threat intelligence

Incident response

SIEM

SOAR

EDR/XDR

Cloud security

AI in security

Python

PowerShell

KQL

SPL

IDS/IPS

Zero Trust

MITRE ATT&CK

Kill chain

Diamond model

Forensics

Education

Bachelor's degree in a related discipline

Tools

Firewalls

VPN

IDS/IPS

SASE

Secure web proxy

Job description

Cox Automotive is seeking a Senior Cybersecurity Engineer that will be responsible for protecting the enterprise by detecting, investigating, and remediating internal and external security threats. This role performs advanced threat analysis, threat intelligence gathering and reporting, and incident response; applies AI to streamline SOC operations and improve detection accuracy; and leads Cybersecurity-focused projects. The role also supports customer security initiatives such as investigative support and threat response, as needed.

What You'll Do:

Cybersecurity – Cyber Intelligence & Incident Response

• Responds to and remediates email, endpoint, identity, cloud, AI, and network-based threats; provides forensic investigation and support.
• Provides after-hours support as needed for response activities.
• Collaborates with cross-divisional and Cybersecurity teams to continuously improve security capabilities and threat response.
• Leads or assists with projects to implement advanced technologies that prevent and identify malicious behavior across cloud, network, endpoint, identity, and email environments.
• Operates and tunes SIEM, SOAR, threat intelligence platforms, advanced email protection, EDR/XDR, cloud security products, IDS/IPS, Zero Trust tooling, and other security technologies.
• Performs threat analysis using industry-standard frameworks (MITRE ATT&CK, kill chain, diamond model).
• Detects, investigates, and responds to AI-enabled threats, such as AI-generated phishing, social engineering, and automated attack tooling.
• Monitors and helps secure enterprise use of AI, including generative AI tools and agents, against risks such as prompt injection, data leakage, and unauthorized access.
• Uses AI-based tools to accelerate investigation, triage, enrichment, and root-cause analysis.
• Builds AI and automation to streamline SOC processes, such as alert enrichment, case summaries, and playbook execution to reduce response times.
• Supports customer security tasks as needed, such as fraud investigations, in partnership with the customer security team.
• Proposes and helps review security plans and policies to improve enterprise security.
• Maintains and produces metrics, operational playbooks, process diagrams, and documentation for the Cybersecurity program.
• Other duties may be assigned as needed to address new security threats facing the enterprise.
  

Emerging Threats Monitoring

• Stays current on the latest threats, AI-driven attack techniques, and security trends, and acts quickly to keep enterprise environments protected.

Incident Management

• Assists in the investigation and resolution of security events and incidents, from triage through post-incident review.

Who You Are:

Minimum Requirements:

• Bachelor's degree in a related discipline and 4 years’ experience in a related field. The right candidate could also have a different combination, such as a master's degree and 2 years’ experience; a Ph.D. and up to 1 year of experience; or 16 years’ experience in a related field
• Hands-on experience in threat intelligence and incident response.
• Hands-on experience with industry-standard security technologies such as firewalls, VPN, IDS/IPS, SASE, secure web proxy, EDR/XDR, SIEM, and SOAR.
• Strong digital forensics and analytical problem-solving skills.
• Working knowledge of major cloud platforms (e.g., AWS, Azure, GCP), including their architectures and native security services.
• Proficiency with query and scripting languages (e.g., SPL, KQL, Python, PowerShell) for threat hunting, analysis, and automation