Cox Automotive is looking for an experienced cybersecurity professional to help protect enterprise systems and customers from existing and emerging threats. This onsite role in Atlanta, GA supports fraud investigations, strengthens the customer security program, and partners with business operations, product, and cybersecurity teams to reduce customer risk and improve threat response.
What you’ll do
- Investigate and respond to threats such as account takeover, credential abuse, phishing, and fraud, including providing forensic support for fraud investigations.
- Support response activities as needed with after-hours support.
- Partner with business, Product, and Cybersecurity teams to reduce customer impact and improve threat response.
- Assist with projects that implement technologies and controls designed to prevent and detect malicious behavior and fraud affecting customers.
- Operate and leverage security tools such as SIEM and log analytics, SOAR, threat intelligence, EDR, email protection, cloud security, IDS/IPS, and Zero Trust technologies.
- Perform threat analysis using industry-standard frameworks including MITRE ATT&CK, kill chain, and the diamond model.
- Investigate account compromise by analyzing authentication, API, and application logs to reconstruct attacker activity and identify other affected customers.
- Use AI-based tools to speed up investigation and triage, and to improve problem solving.
- Apply AI and automation to streamline SOC processes, enhance threat detection, and improve detection logic and fraud signals.
- Translate threat findings into detection and protection improvements for the customer security program.
- Propose and help review security plans, policies, and customer protections.
- Maintain metrics, playbooks, and documentation, including fraud trends, and produce threat intelligence and fraud reports for security, business, and product stakeholders.
- Stay current on emerging threats, fraud schemes, and AI-driven attack techniques targeting customers, and act quickly to protect both customers and the enterprise.
- Assist in the investigation and resolution of security events and incidents.
What you bring
- Bachelor’s degree in a related discipline and 2+ years of experience in a related field. Alternative combinations include master’s degree with up to 2 years experience, or 14 years experience in a related field.
- Hands-on experience in threat intelligence and incident response.
- Hands-on experience with security technologies such as firewalls, VPN, IDS/IPS, SASE, secure web proxy, EDR/XDR, SIEM, and SOAR.
- Strong digital forensics and analytical problem-solving skills.
- Working knowledge of major cloud platforms including AWS, Azure, and GCP, with familiarity in architectures and native security services.
- Proficiency with query and scripting languages such as SPL, KQL, Python, and PowerShell for threat hunting, analysis, and automation.
Technologies you’ll work with
SIEM, log analytics, SOAR, threat intelligence, EDR, email protection, cloud security, IDS/IPS, Zero Trust, MITRE ATT&CK, kill chain, diamond model, authentication logs, API logs, application logs, firewalls, VPN, SASE, secure web proxy, EDR/XDR, AWS, Azure, GCP, SPL, KQL, Python, PowerShell.
Compensation
Base salary range: $89,400 - $134,000 per year. Base pay may vary based on factors such as the ultimate location of the position and the selected candidate’s knowledge, skills, and abilities. The position may also be eligible for additional compensation that may include an incentive program.
Benefits
- Flexibility to take as much vacation with pay as consistent with duties, company needs, and obligations.
- Seven paid holidays throughout the calendar year.
- Up to 160 hours of paid wellness annually for your own wellness or that of family members.
- Additional paid time off including bereavement leave.
- Time off to vote and jury duty leave.
- Volunteer time off.
- Military leave and parental leave.
