Senior Cybersecurity Engineer

Cox Automotive is seeking a Senior Cybersecurity Engineer that will be responsible for protecting the enterprise by detecting, investigating, and remediating internal and external security threats. This role performs advanced threat analysis, threat intelligence gathering and reporting, and incident response; applies AI to streamline SOC operations and improve detection accuracy; and leads Cybersecurity-focused projects. The role also supports customer security initiatives such as investigative support and threat response, as needed.

• Responds to and remediates email, endpoint, identity, cloud, AI, and network-based threats; provides forensic investigation and support.
• Provides after-hours support as needed for response activities.
• Collaborates with cross-divisional and Cybersecurity teams to continuously improve security capabilities and threat response.
• Leads or assists with projects to implement advanced technologies that prevent and identify malicious behavior across cloud, network, endpoint, identity, and email environments.
• Operates and tunes SIEM, SOAR, threat intelligence platforms, advanced email protection, EDR/XDR, cloud security products, IDS/IPS, Zero Trust tooling, and other security technologies.
• Performs threat analysis using industry-standard frameworks (MITRE ATT&CK, kill chain, diamond model).
• Detects, investigates, and responds to AI-enabled threats, such as AI-generated phishing, social engineering, and automated attack tooling.
• Monitors and helps secure enterprise use of AI, including generative AI tools and agents, against risks such as prompt injection, data leakage, and unauthorized access.
• Uses AI-based tools to accelerate investigation, triage, enrichment, and root-cause analysis.
• Builds AI and automation to streamline SOC processes, such as alert enrichment, case summaries, and playbook execution to reduce response times.
• Supports customer security tasks as needed, such as fraud investigations, in partnership with the customer security team.
• Proposes and helps review security plans and policies to improve enterprise security.
• Maintains and produces metrics, operational playbooks, process diagrams, and documentation for the Cybersecurity program.
• Other duties may be assigned as needed to address new security threats facing the enterprise.

• Stays current on the latest threats, AI-driven attack techniques, and security trends, and acts quickly to keep enterprise environments protected.

• Assists in the investigation and resolution of security events and incidents, from triage through post-incident review.

• Bachelor's degree in a related discipline and 4 years’ experience in a related field. The right candidate could also have a different combination, such as a master's degree and 2 years’ experience; a Ph.D. and up to 1 year of experience; or 16 years’ experience in a related field
• Hands-on experience in threat intelligence and incident response.
• Hands-on experience with industry-standard security technologies such as firewalls, VPN, IDS/IPS, SASE, secure web proxy, EDR/XDR, SIEM, and SOAR.
• Strong digital forensics and analytical problem-solving skills.
• Working knowledge of major cloud platforms (e.g., AWS, Azure, GCP), including their architectures and native security services.
• Proficiency with query and scripting languages (e.g., SPL, KQL, Python, Power Shell) for threat hunting, analysis, and automation