Senior Cybersecurity Engineer

Cox Automotive is seeking a Senior Cybersecurity Engineer to help safeguard the enterprise by detecting, investigating, and remediating internal and external security threats. The role combines advanced threat analysis, threat intelligence, and incident response with leadership on cybersecurity initiatives, including the use of AI to improve SOC operations.

Key Responsibilities

• Respond to and remediate email, endpoint, identity, cloud, AI, and network-based threats, including forensic investigation and response support.
• Provide after-hours support as needed to carry out response activities.
• Partner with cross-divisional and Cybersecurity teams to continuously improve security capabilities and threat response.
• Lead or assist projects that deploy advanced technologies to prevent and identify malicious activity across cloud, network, endpoint, identity, and email environments.
• Operate and tune security tooling, including SIEM, SOAR, threat intelligence platforms, advanced email protection, EDR/XDR, cloud security products, IDS/IPS, and Zero Trust technologies.
• Perform threat analysis using industry-standard frameworks, including MITRE ATT&CK, kill chain, and the diamond model.
• Detect, investigate, and respond to AI-enabled threats, including AI-generated phishing, social engineering, and automated attack tooling.
• Monitor and support secure enterprise use of AI, including generative AI tools and agents, addressing risks such as prompt injection, data leakage, and unauthorized access.
• Use AI-based tools to accelerate investigation workflows such as triage, enrichment, and root-cause analysis.
• Build AI and automation capabilities to streamline SOC processes, including alert enrichment, case summaries, and playbook execution to reduce response times.
• Support customer security activities as needed (for example, fraud investigations) in coordination with the customer security team.
• Propose and review security plans and policies to improve enterprise security posture.
• Maintain and produce security metrics, operational playbooks, process diagrams, and documentation for the Cybersecurity program.
• Stay current on emerging threats, AI-driven attack techniques, and security trends, acting quickly to protect enterprise environments.
• Assist with investigations and resolution of security events and incidents, from triage through post-incident review.
• Other duties may be assigned to address new threats facing the enterprise.

Required Qualifications

• Bachelor’s degree in a related discipline and 4 years of experience in a related field. Alternative combinations may include a master’s degree and 2 years, a Ph.D. and up to 1 year, or 16 years of experience in a related field.
• Hands-on experience in threat intelligence and incident response.
• Hands-on experience with industry-standard security technologies, including firewalls, VPN, IDS/IPS, SASE, secure web proxy, EDR/XDR, SIEM, and SOAR.
• Strong digital forensics and analytical problem-solving skills.
• Working knowledge of major cloud platforms (AWS, Azure, GCP), including architectures and native security services.
• Proficiency with query and scripting languages such as SPL, KQL, Python, and PowerShell for threat hunting, analysis, and automation.

Technologies

• SIEM, SOAR, threat intelligence platforms, advanced email protection
• EDR/XDR, cloud security products, IDS/IPS, Zero Trust tooling
• MITRE ATT&CK, kill chain, diamond model
• AWS, Azure, GCP
• Firewalls, VPN, SASE, secure web proxy
• SPL, KQL, Python, PowerShell

Location and Employment Details

• Location: Atlanta, GA (onsite)
• Employment type: Full-time
• Posted date: 10/19/2026

Benefits

• Health care insurance (medical, dental, vision)
• Retirement planning (401(k))
• Paid days off (sick leave, parental leave, flexible vacation/wellness days, and/or PTO)