> Markdown version of [/jobs/ext/4270080-senior-cybersecurity-engineer](https://www.wearedevelopers.com/jobs/ext/4270080-senior-cybersecurity-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Cybersecurity Engineer

- **Company:** Cox Automotive
- **Location:** Sandy Springs, GA, United States
- **Experience:** Expert
- **Salary:** $101,500.0 - $169,100.0
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Amazon Web Services, Microsoft Azure, Cloud Computing Security, Cyber Security, Information Leak Prevention, Digital Forensics, Intrusion Detection Systems, Virtual Private Networks (VPN), Python (Programming Language), Windows PowerShell, Anti-Phishing, Kusto Query Language, Zero Trust Network Access, Web Application Security, Security Information and Event Management, Scripting, Google Cloud, Mitre Att&ck, Firewalls (Computer Science)
- **Published:** October 19, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=10d3358956fd3557

## About the Role

* Bachelor's degree in a related discipline and 4 years' experience in a related field. The right candidate could also have a different combination, such as a master's degree and 2 years' experience; a Ph.D. and up to 1 year of experience; or 16 years' experience in a related field
 * Hands-on experience in threat intelligence and incident response.
 * Hands-on experience with industry-standard security technologies such as firewalls, VPN, IDS/IPS, SASE, secure web proxy, EDR/XDR, SIEM, and SOAR.
 * Strong digital forensics and analytical problem-solving skills.
 * Working knowledge of major cloud platforms (e.g., AWS, Azure, GCP), including their architectures and native security services.
 * Proficiency with query and scripting languages (e.g., SPL, KQL, Python, PowerShell) for threat hunting, analysis, and automation

## Description

* Responds to and remediates email, endpoint, identity, cloud, AI, and network-based threats; provides forensic investigation and support.
 * Provides after-hours support as needed for response activities.
 * Collaborates with cross-divisional and Cybersecurity teams to continuously improve security capabilities and threat response.
 * Leads or assists with projects to implement advanced technologies that prevent and identify malicious behavior across cloud, network, endpoint, identity, and email environments.
 * Operates and tunes SIEM, SOAR, threat intelligence platforms, advanced email protection, EDR/XDR, cloud security products, IDS/IPS, Zero Trust tooling, and other security technologies.
 * Performs threat analysis using industry-standard frameworks (MITRE ATT&CK, kill chain, diamond model).
 * Detects, investigates, and responds to AI-enabled threats, such as AI-generated phishing, social engineering, and automated attack tooling.
 * Monitors and helps secure enterprise use of AI, including generative AI tools and agents, against risks such as prompt injection, data leakage, and unauthorized access.
 * Uses AI-based tools to accelerate investigation, triage, enrichment, and root-cause analysis.
 * Builds AI and automation to streamline SOC processes, such as alert enrichment, case summaries, and playbook execution to reduce response times.
 * Supports customer security tasks as needed, such as fraud investigations, in partnership with the customer security team.
 * Proposes and helps review security plans and policies to improve enterprise security.
 * Maintains and produces metrics, operational playbooks, process diagrams, and documentation for the Cybersecurity program.
 * Other duties may be assigned as needed to address new security threats facing the enterprise.

Emerging Threats Monitoring

 * Stays current on the latest threats, AI-driven attack techniques, and security trends, and acts quickly to keep enterprise environments protected.

Incident Management

 * Assists in the investigation and resolution of security events and incidents, from triage through post-incident review.