> Markdown version of [/jobs/ext/3772256-cybersecurity-engineer-ii](https://www.wearedevelopers.com/jobs/ext/3772256-cybersecurity-engineer-ii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cybersecurity Engineer II

- **Company:** Cox Automotive
- **Location:** Sandy Springs, GA, United States
- **Experience:** Experienced
- **Salary:** $89,400.0 - $134,000.0
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Amazon Web Services, Microsoft Azure, Cloud Computing Security, Cyber Security, Digital Forensics, Intrusion Detection and Prevention, Intrusion Detection Systems, Virtual Private Networks (VPN), Python (Programming Language), Log Analysis, Windows PowerShell, Anti-Phishing, Kusto Query Language, Zero Trust Network Access, Web Application Security, Security Information and Event Management, Scripting, Google Cloud, Mitre Att&ck, Cyber Threat Analysis, Firewalls (Computer Science), Security Orchestration, Automation & Response
- **Published:** October 16, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=86388b730193e56a

## About the Role

* Bachelor's degree in a related discipline and 2+ years' experience in a related field. The right candidate could also have a different combination, such as a master's degree and up to 2 years' experience; or 14 years' experience in a related field
 * Hands-on experience in threat intelligence and incident response.
 * Hands-on experience with industry-standard security technologies such as firewalls, VPN, IDS/IPS, SASE, secure web proxy, EDR/XDR, SIEM, and SOAR.
 * Strong digital forensics and analytical problem-solving skills.
 * Working knowledge of major cloud platforms (e.g., AWS, Azure, GCP), including their architectures and native security services.
 * Proficiency with query and scripting languages (e.g., SPL, KQL, Python, PowerShell) for threat hunting, analysis, and automation., Applicants must currently be authorized to work in the United States for any employer without current or future sponsorship.

## Description

* Investigates and responds to threats including account takeover, credential abuse, phishing, and fraud; supports fraud investigations and provides forensic support.
 * Provides after-hours support as needed for response activities.
 * Partners with business, Product and Cybersecurity teams to reduce customer impact and improve threat response.
 * Assists with projects to implement technologies and controls that prevent and identify malicious behavior and fraud affecting customers.
 * Operates security tools such as SIEM and log analytics, SOAR, threat intelligence, EDR, email protection, cloud security, IDS/IPS, and Zero Trust technologies.
 * Performs threat analysis using industry standard frameworks (MITRE ATT&CK, kill chain, diamond model).
 * Investigates account compromise by analyzing authentication, API, and application logs to reconstruct attacker activity and identify other affected customers.
 * Uses AI-based tools to speed up investigation, triage, and improve problem solving.
 * Uses AI and automation to streamline SOC processes and improve threat detection, including detection logic and fraud signals.
 * Turns threat findings into detections and protections, enhancing the customer security program.
 * Proposes and helps review security plans, policies, and customer protections.
 * Maintains metrics, playbooks, and documentation for the customer security program, including fraud trends.
 * Produces threat intelligence and fraud reports for security, business, and product stakeholders.

Emerging Threats Monitoring

 * Stays current on emerging threats, fraud schemes, and AI-driven attack techniques targeting customers, and acts quickly to keep customers and the enterprise protected.

Incident Management

 * Assists in the investigation and resolution of security events and incidents.