Threat Hunter & Incident Response Engineer II — AI-Driven Security

Cybersecurity Jobs; Atlanta (GA); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

Health care insurance

401(k) retirement plan

Paid time off

Job summary

Cox Automotive is seeking a security professional to join our team in Atlanta, GA onsite. You will investigate threats, support fraud investigations, and collaborate with cross-functional teams to strengthen protection for customers and the enterprise.

The role requires hands-on experience in threat intelligence, incident response, and security technologies such as SIEM, SOAR, EDR/XDR, and cloud security. You will work with cloud platforms (AWS/Azure/GCP) and scripting languages like Python and

Qualifications

• Bachelor’s degree in a related discipline and 2+ years of experience in a related field; or a master’s degree with up to 2 years of experience; or 14 years of experience.
• Hands-on experience in threat intelligence and incident response.
• Hands-on experience with security technologies such as firewalls, VPN, IDS/IPS, SASE, secure web proxy, EDR/XDR, SIEM, and SOAR.
• Strong digital forensics and analytical problem-solving skills.
• Working knowledge of AWS, Azure, and GCP cloud platforms and their native security services.
• Proficiency with query and scripting languages such as SPL, KQL, Python, and PowerShell.

Responsibilities

• Investigate and respond to threats such as account takeover, credential abuse, phishing, and fraud, including forensic support for investigations.
• Provide after-hours support as needed.
• Collaborate with Business, Product, and Cybersecurity teams to reduce customer impact and improve threat response.
• Assist with projects to implement technologies and controls that prevent and identify malicious behavior and fraud.
• Operate and support security tools including SIEM, SOAR, threat intelligence, EDR, email protection, cloud security, IDS/IPS, and Zero Trust technologies.
• Perform threat analysis using MITRE ATT&CK, kill chain, and diamond model.
• Investigate account compromise by analyzing authentication, API, and application logs.
• Use AI-based tools to accelerate investigation, triage, and problem solving.
• Apply AI and automation to streamline SOC processes and improve threat detection.
• Turn threat findings into detection and protection enhancements for the customer security program.
• Propose and help review security plans, policies, and protections.
• Maintain metrics, playbooks, and documentation for the customer security program.
• Stay current on emerging threats and assist with investigation of security incidents.

Skills

Threat intelligence

Incident response

Cloud security

Digital forensics

Scripting (Python/PowerShell)

Education

Bachelor’s degree in a related field

Master’s degree (optional)

Tools

SIEM

SOAR

EDR/XDR

IDS/IPS

KQL

Job description

Cox Automotive is seeking a security professional to join our team in Atlanta, GA onsite. You will investigate threats, support fraud investigations, and collaborate with cross-functional teams to strengthen protection for customers and the enterprise.

The role requires hands-on experience in threat intelligence, incident response, and security technologies such as SIEM, SOAR, EDR/XDR, and cloud security. You will work with cloud platforms (AWS/Azure/GCP) and scripting languages like Python and