Senior Cybersecurity Engineer

Cox Enterprises • Atlanta, GA

9d • $101,500 - $169,100 • Hybrid

About The Position

Cox Automotive is seeking a Senior Cybersecurity Engineer to protect the enterprise by detecting, investigating, and remediating internal and external security threats. The role performs advanced threat analysis, threat intelligence gathering and reporting, incident response, and leads cybersecurity-focused projects. It applies AI to streamline SOC operations and improve detection accuracy, and supports customer security initiatives such as investigative support and threat response as needed.

The position responds to and remediates threats across email, endpoint, identity, cloud, AI, and network environments, including forensic investigation and support. It operates and tunes a broad range of security technologies, uses industry-standard frameworks for threat analysis, and helps secure enterprise use of AI. The engineer also develops AI and automation for SOC processes, collaborates across cybersecurity teams, contributes to security plans and policies, and maintains program metrics, playbooks, process diagrams, and documentation. After-hours support may be needed for response activities.

The role is hybrid, with the ability to work remotely part of the week, and is a day-shift position with no travel. Compensation includes a base salary range of $101,500 to $169,100, with possible additional incentive compensation. Eligible employee benefits include paid vacation, seven paid holidays, up to 160 hours of paid wellness time annually, and other paid leave. Additional benefits may include medical, dental, and vision insurance, 401(k), and paid time off.

Requirements

• Bachelor’s degree in a related discipline and 4 years of experience in a related field; alternatively, a master’s degree and 2 years of experience, a Ph.D. and up to 1 year of experience, or 16 years of experience in a related field.
• Hands-on experience in threat intelligence and incident response.
• Hands-on experience with industry-standard security technologies such as firewalls, VPN, IDS/IPS, SASE, secure web proxy, EDR/XDR, SIEM, and SOAR.
• Strong digital forensics and analytical problem-solving skills.
• Working knowledge of major cloud platforms, such as AWS, Azure, or GCP, including their architectures and native security services.
• Proficiency with query and scripting languages such as SPL, KQL, Python, and PowerShell for threat hunting, analysis, and automation.
• Must clear a pre-employment drug test.

Responsibilities

• Detect, investigate, and remediate internal and external security threats across email, endpoint, identity, cloud, AI, and network environments.
• Provide forensic investigation and support, including after-hours response support as needed.
• Gather and report threat intelligence and perform threat analysis using frameworks such as MITRE ATT&CK, the kill chain, and the diamond model.
• Collaborate with cross-divisional and Cybersecurity teams to continuously improve security capabilities and threat response.
• Lead or assist with projects implementing technologies to prevent and identify malicious behavior across cloud, network, endpoint, identity, and email environments.
• Operate and tune SIEM, SOAR, threat intelligence platforms, advanced email protection, EDR/XDR, cloud security products, IDS/IPS, Zero Trust tooling, and other security technologies.
• Detect, investigate, and respond to AI-enabled threats, including AI-generated phishing, social engineering, and automated attack tooling.
• Monitor and help secure enterprise use of AI, including generative AI tools and agents, against prompt injection, data leakage, and unauthorized access.
• Use AI-based tools to accelerate investigation, triage, enrichment, and root-cause analysis.
• Build AI and automation to streamline SOC processes, including alert enrichment, case summaries, and playbook execution.
• Support customer security tasks, such as fraud investigations, in partnership with the customer security team.
• Propose and help review security plans and policies to improve enterprise security.
• Maintain and produce metrics, operational playbooks, process diagrams, and Cybersecurity program documentation.
• Stay current on emerging threats, AI-driven attack techniques, and security trends, and act to protect enterprise environments.
• Assist in investigating and resolving security events and incidents from triage through post-incident review.
• Perform other duties as needed to address new security threats facing the enterprise.

Benefits

• Eligible employees may take paid vacation as consistent with their duties, company needs, and obligations.
• Seven paid holidays throughout the calendar year.
• Up to 160 hours of paid wellness time annually for the employee’s own wellness or that of family members.
• Additional paid leave may include bereavement leave, time off to vote, jury duty leave, volunteer time off, military leave, and parental leave.
• Benefits may include medical, dental, and vision insurance.
• Benefits may include 401(k) retirement planning.
• Benefits may include sick leave, parental leave, flexible vacation/wellness days, and/or PTO.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior