Cybersecurity Engineer II

Cox Automotive is looking for a Customer Security Analyst II to help identify and defend against existing and emerging threats affecting enterprise systems and customers. This onsite role in Long Island, NY focuses on reducing customer risk and strengthening the customer security program using advanced security capabilities and AI-driven tools, while partnering closely with business operations and product teams.

What you’ll do

• Investigate and respond to security threats including account takeover, credential abuse, phishing, and fraud, including support for fraud investigations with forensic guidance.
• Provide after-hours support as needed to support response activities.
• Collaborate with business, Product, and Cybersecurity teams to reduce customer impact and improve threat response effectiveness.
• Help implement technologies and controls to prevent and identify malicious behavior and fraud impacting customers.
• Operate and leverage security tools such as SIEM and log analytics, SOAR, threat intelligence, EDR, email protection, cloud security, IDS/IPS, and Zero Trust technologies.
• Perform threat analysis using industry-standard frameworks including MITRE ATT&CK, kill chain, and the diamond model.
• Investigate account compromise by analyzing authentication, API, and application logs to reconstruct attacker activity and identify other affected customers.
• Use AI-based tools to accelerate investigation, triage, and problem solving.
• Use AI and automation to streamline SOC processes, improve threat detection, and refine detection logic and fraud signals.
• Convert threat findings into detections and protections to enhance the customer security program.
• Assist with security plans, policies, and customer protections, including proposing and reviewing documentation.
• Maintain metrics, playbooks, and documentation for the customer security program, including fraud trends.
• Produce threat intelligence and fraud reports for security, business, and product stakeholders.
• Stay current on emerging threats, fraud schemes, and AI-driven attack techniques targeting customers, acting quickly to keep customers and the enterprise protected.
• Assist with investigation and resolution of security events and incidents.

What you bring

• Bachelor’s degree in a related discipline and 2+ years of experience in a related field. Alternate combinations may include a master’s degree with up to 2 years experience, or 14 years of related experience.
• Hands-on experience in threat intelligence and incident response.
• Hands-on experience with security technologies such as firewalls, VPN, IDS/IPS, SASE, secure web proxy, and EDR/XDR along with SIEM and SOAR.
• Strong digital forensics and analytical problem-solving skills.
• Working knowledge of major cloud platforms such as AWS, Azure, and GCP, including architecture and native security services.
• Proficiency with query and scripting languages such as SPL, KQL, Python, and PowerShell for threat hunting, analysis, and automation.

Compensation

Base salary range: $89,400 to $134,000 per year.

The base salary may vary within the anticipated range based on factors such as the ultimate location of the position and the selected candidate’s knowledge, skills, and abilities. The position may also be eligible for additional compensation that may include an incentive program.

Benefits

• Flexibility to take as much vacation with pay as consistent with duties, company needs, and obligations
• Seven paid holidays throughout the calendar year
• Up to 160 hours of paid wellness annually for your own wellness or that of family members
• Bereavement leave (additional paid time off)
• Time off to vote
• Jury duty leave
• Volunteer time off
• Military leave
• Parental leave