Senior Cybersecurity Engineer

Cox Automotive is hiring a Senior Cybersecurity Engineer (onsite) in Atlanta, GA to protect the enterprise by detecting, investigating, and remediating threats.

Responsibilities

• Respond to and remediate email, endpoint, identity, cloud, AI, and network security threats
• Provide forensic investigation and support during incident response activities
• Deliver after-hours support as needed for response activities
• Collaborate with cross-divisional stakeholders and Cybersecurity teams to continuously improve security capabilities and threat response
• Lead or assist projects implementing advanced technologies to prevent and identify malicious behavior across cloud, network, endpoint, identity, and email environments
• Operate and tune security tooling, including SIEM, SOAR, threat intelligence platforms, advanced email protection, EDR/XDR, cloud security products, IDS/IPS, Zero Trust tooling, and other security technologies
• Perform threat analysis using industry-standard frameworks: MITRE ATT&CK, kill chain, and diamond model
• Detect, investigate, and respond to AI-enabled threats (including AI-generated phishing, social engineering, and automated attack tooling)
• Monitor and help secure enterprise use of AI (generative AI tools and agents), addressing risks such as prompt injection, data leakage, and unauthorized access
• Use AI-based tools to accelerate investigation, triage, enrichment, and root-cause analysis
• Build AI and automation to streamline SOC processes, including alert enrichment, case summaries, and playbook execution to reduce response times
• Support customer security tasks when needed (for example, fraud investigations) in partnership with the customer security team
• Propose and help review security plans and policies to improve enterprise security
• Maintain and produce metrics, operational playbooks, process diagrams, and documentation for the Cybersecurity program
• Assist in investigating and resolving security events and incidents from triage through post-incident review
• Stay current on emerging threats, AI-driven attack techniques, and security trends; act quickly to protect enterprise environments
• Other duties may be assigned to address new security threats facing the enterprise

Requirements

• Bachelor’s degree in a related discipline and 4 years of experience in a related field
• Equivalent acceptable combinations include: master’s degree with 2 years experience; Ph.D. with up to 1 year experience; or 16 years of related experience
• Hands-on experience in threat intelligence and incident response
• Hands-on experience with security technologies including firewalls, VPN, IDS/IPS, SASE, secure web proxy, EDR/XDR, SIEM, and SOAR
• Strong digital forensics and analytical problem-solving skills
• Working knowledge of major cloud platforms (e.g., AWS, Azure, GCP), including architectures and native security services
• Proficiency with query and scripting languages such as SPL, KQL, Python, and PowerShell for threat hunting, analysis, and automation

Technologies

• SIEM
• SOAR
• Threat intelligence platforms
• Advanced email protection
• EDR/XDR
• Cloud security products
• IDS/IPS
• Zero Trust tooling
• MITRE ATT&CK, kill chain, diamond model
• AWS, Azure, GCP
• Firewalls, VPN, SASE
• Secure web proxy
• SPL, KQL
• Python, PowerShell

Benefits

• Health care insurance (medical, dental, vision)
• Retirement planning (401(k))
• Paid days off (sick leave, parental leave, flexible vacation/wellness days, and/or PTO)

• Location: Atlanta, GA (onsite)
• Type: Full-time
• Posted date: 10/19/2026