Cybersecurity Engineer II

Cox Communications • Atlanta, GA

4d • Hybrid

About The Position

Cox Automotive is seeking a Customer Security Analyst II to identify and defend against existing and emerging threats affecting the enterprise and customers, support fraud investigations, and partner with business operations and product teams to reduce customer risk. The role helps expand the customer security program by applying cybersecurity expertise, advanced technologies, and AI-driven capabilities to improve investigative efficiency and threat detection.

The position investigates threats such as account takeover, credential abuse, phishing, and fraud; supports incident response and forensic work; and collaborates with business, Product, and Cybersecurity teams to reduce customer impact. It uses security technologies and threat-analysis frameworks to investigate account compromise, detect malicious activity, and turn findings into improved detections and customer protections. The role also maintains program metrics, playbooks, and documentation, and produces threat intelligence and fraud reports for relevant stakeholders. After-hours response support may be needed.

The position is hybrid, with the ability to work remotely part of the week, and is a day-shift role with no travel. The base salary range is $89,400 to $134,000, with possible additional incentive compensation. Eligible employees may receive flexible paid vacation, paid holidays, wellness time, and other leave. Employment requires clearing a pre-employment drug test; the company does not currently test for marijuana for this position. Applicants must be authorized to work in the United States without current or future sponsorship.

Requirements

• Bachelor’s degree in a related discipline and 2+ years of experience in a related field; alternatively, a master’s degree and up to 2 years of experience, or 14 years of related experience.
• Hands-on experience in threat intelligence and incident response.
• Hands-on experience with industry-standard security technologies such as firewalls, VPN, IDS/IPS, SASE, secure web proxy, EDR/XDR, SIEM, and SOAR.
• Strong digital forensics and analytical problem-solving skills.
• Working knowledge of major cloud platforms such as AWS, Azure, or GCP, including their architectures and native security services.
• Proficiency with query and scripting languages such as SPL, KQL, Python, or PowerShell for threat hunting, analysis, and automation.
• Must clear a pre-employment drug test.
• Must be authorized to work in the United States for any employer without current or future sponsorship; visa sponsorship and OPT, CPT, and STEM/OPT are not available.

Responsibilities

• Investigate and respond to threats including account takeover, credential abuse, phishing, and fraud; support fraud investigations and provide forensic support.
• Provide after-hours support as needed for response activities.
• Partner with business, Product, and Cybersecurity teams to reduce customer impact and improve threat response.
• Assist with projects to implement technologies and controls that prevent and identify malicious behavior and fraud affecting customers.
• Operate security tools including SIEM and log analytics, SOAR, threat intelligence, EDR, email protection, cloud security, IDS/IPS, and Zero Trust technologies.
• Perform threat analysis using frameworks such as MITRE ATT&CK, the kill chain, and the diamond model.
• Investigate account compromise by analyzing authentication, API, and application logs to reconstruct attacker activity and identify other affected customers.
• Use AI-based tools to speed up investigation and triage and improve problem solving.
• Use AI and automation to streamline SOC processes and improve threat detection, including detection logic and fraud signals.
• Turn threat findings into detections and protections and enhance the customer security program.
• Propose and help review security plans, policies, and customer protections.
• Maintain metrics, playbooks, and documentation for the customer security program, including fraud trends.
• Produce threat intelligence and fraud reports for security, business, and product stakeholders.
• Monitor emerging threats, fraud schemes, and AI-driven attack techniques targeting customers, and act to protect customers and the enterprise.
• Assist in the investigation and resolution of security events and incidents.

Benefits

• Flexible paid vacation, as consistent with duties and company needs.
• Seven paid holidays throughout the calendar year.
• Up to 160 hours of paid wellness time annually for the employee or family members.
• Bereavement leave.
• Time off to vote.
• Jury duty leave.
• Volunteer time off.
• Military leave.
• Parental leave.
• Potential health care insurance, including medical, dental, and vision.
• Potential 401(k) retirement planning.
• Potential sick leave, parental leave, flexible vacation/wellness days, and/or PTO.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level