{"id":1973719,"url":"https://alion.io/job/cox-communications-lead-cybersecurity-detection-engineer","title":"Lead Cybersecurity Detection Engineer","company":{"id":8079,"name":"Cox Communications","domain":"cox.com","url":"https://alion.io/company/cox","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":90,"open_postings":77,"ghost_share":0,"stale_share":0.584,"repost_share":0,"time_to_fill_p50_days":20,"computed_at":"2026-10-12T06:55:09Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Atlanta, United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":122600,"max":204400,"currency":"USD","period":"year","gross":null,"usd_annual":204400},"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Cyber Kill Chain","optional":false},{"name":"Diamond Model","optional":false},{"name":"DLP","optional":false},{"name":"GCP","optional":false},{"name":"GDPR","optional":false},{"name":"Multi-Agent Systems","optional":false},{"name":"PCI DSS","optional":false},{"name":"Prompt Engineering","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-10-06T20:25:08Z","employer_posted_date":"2026-10-06","last_verified_at":"2026-10-12T03:51:18Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"Company\nCox Automotive - USAJob Family Group\nInformation TechnologyJob Profile\nCybersecurity Lead EngineerManagement Level\nManager - Non People LeaderFlexible Work Option\nHybrid - Ability to work remotely part of the weekTravel %\nNoWork Shift\nDayCompensation\nCompensation includes a base salary in the range of $122,600.00 - $204,400.00. The base salary may vary within the anticipated base pay range based on factors such as the ultimate location of the position and the selected candidate’s knowledge, skills, and abilities. Position may be eligible for additional compensation that may include an incentive program.Job Description\nCox Automotive is seeking an experienced Lead Cybersecurity Engineer to serve as a senior technical voice on ourDetection Engineering team, supporting next-generation Cyber Defense across our diverse portfolio of automotive solutions including Dealertrack, Manheim, Autotrader, Kelley Blue Book, Central Dispatch, and vAuto.\nReporting to the Director of Cyber Detection Engineering, you'll design, build, and maintain advanced enterprise- and customer-focused detection capabilities - including AI-driven detection agents and automation - while providing hands-on technical leadership and mentorship to other engineers on the team. You'll partner closely with Incident Response, Threat Intelligence, and Vulnerability Management to strengthen detection coverage, with visibility into detection needs across multiple Cox Automotive business units. The ideal candidate will possess expert-level, hands-on knowledge in SIEM implementation and log ingestion, Detection Engineering best practices, Incident Response, and Threat Intelligence, along with strong verbal and written communication skills and a track record of raising the technical bar for engineers around them.\nWhat You'll Do\nCybersecurity Detection Engineering:\nServe as a senior technical lead for detection engineering, building and maintaining detective solutions that protect Cox Automotive’s internal systems as well as its domestic and international businesses.\nContribute to and help execute the Detection Engineering strategy, roadmap, and objectives.\nArchitect and deploy agentic AI systems that autonomously detect, analyze, and respond to security threats across enterprise infrastructure. \nDesign multi-agent frameworks where specialized AI agents collaborate on threat hunting, incident investigation, and attack pattern recognition.\nDevelop self-improving detection systems that learn from each investigation and automatically enhance detection rules and playbooks.\nDesign and implement advanced threat detection techniques using tools such as SIEM, EDR, and SOAR platforms.\nDevelop innovative custom detection rules and automated remediation playbooks and alerts tailored to the Cox Automotive’s enterprise and customer threat landscape.\nLeverage industry standard MITRE/ATLAS frameworks to identify detection coverage and close gaps.\nMonitor, optimize, and continuously improve detection systems for performance, scalability, and effectiveness.\nCollaborate with Threat Detection and Response team to continuously improve cybersecurity capabilities in identification, management, and response to threats in the most efficient and effective manner.\nPerform attack simulation testing to validate efficacy of use cases.\nConduct purple teaming exercises in collaboration with the Vulnerability Management team.\nManage and maintain SIEM/Data Lake data management and log ingestion infrastructure in collaboration with Cyber Defense Engineering counterparts. \nEvaluate, validate, tune, and sunset detections as needed.\nBuild and maintain operational guidelines, diagrams, and documentation for security detection and response.\nProvide off-hour support as needed for security administration, detection, and response activities.\nIncident Response:\nCollaborate with the Incident Response team to ensure rapid detection and containment of cyber threats.\nBuild threat detection logic during incident response to accelerate threat identification and containment.\nContinuously improve detection and response processes based on lessons learned from incidents.\nThreat Intelligence Integration:\nLeverage threat intelligence to enhance detection capabilities and proactively mitigate risks.\nIdentify and analyze new and emerging threat vectors and incorporate them into detection strategies.\nStakeholder Collaboration:\nPartner with other Cybersecurity, Engineering, and Product teams to ensure successful deployment of detection and response solutions.\nCollaborate with Product teams to design and implement new customer-focused detection and response solutions.\nCommunicate detection capabilities, findings, and technical recommendations clearly to technical and non-technical stakeholders, escalating to leadership as needed.\nGovernance and Compliance:\nDesign and implement processes that adhere to regulatory requirements and industry standards (e.g., GDPR, PCI-DSS, NIST).\nMaintain documentation of detection use cases, processes, and configurations.\nWho You Are\nMinimum Qualifications\nBachelor’s degree in Computer Science or a related discipline and 6+ years of industry related professional experience\nMulti-cloud security experience (AWS, Azure, GCP)\nExperience with AI/ML frameworks and prompt engineering for security applications\nExpert level knowledge of Detection Engineering\nStrong experience with information security, network security, security monitoring, and Incident Response.\nStrong experience with developing SIEM/SOAR detection and automation use cases.\nWorking experience with industry standard security technologies and services such as threat intelligence, firewalls, SASE, IPS, endpoint security, DLP, SIEM/SOAR, and Data Lakes.\nExpert level knowledge on the attack kill chain and diamond model.\n3+ years experience in a cyber defense role\n Preferred Qualifications\nOSCP, GSEC, GCIA, GFE, GCFA, CISA, CISSP, CISM, or CIA certification(s)\nDev Ops / Engineering / Network / System Administration experience\nExperience developing customer-focused detection and response systems\nDrug Testing\nTo be employed in this role, you’ll need to clear a pre-employment drug test. Cox Automotive does not currently administer a pre-employment drug test for marijuana for this position. However, we are a drug-free workplace, so the possession, use or being under the influence of drugs illegal under federal or state law during work hours, on company property and/or in company vehicles is prohibited.Benefits\nThe Company offers eligible employees the flexibility to take as much vacation with pay as they deem consistent with their duties, the company’s needs, and its obligations; seven paid holidays throughout the calendar year; and up to 160 hours of paid wellness annually for their own wellness or that of family members. Employees are also eligible for additional paid time off in the form of bereavement leave, time off to vote, jury duty leave, volunteer time off, military leave, and parental leave.About Us\nThrough groundbreaking technology and a commitment to stellar experiences for drivers and dealers alike, Cox Automotive employees are transforming the way the world buys, owns, sells - or simply uses - cars. Cox Automotive employees get to work on iconic consumer brands like Autotrader and Kelley Blue Book and industry-leading dealer-facing companies like vAuto and Manheim, all while enjoying the people-centered atmosphere that is central to our life at Cox. Benefits of working at Cox may include health care insurance (medical, dental, vision), retirement planning (401(k)), and paid days off (sick leave, parental leave, flexible vacation/wellness days, and/or PTO). For more details on what benefits you may be offered, visit our benefits page. Cox is an Equal Employment Opportunity employer - All qualified applicants/employees will receive consideration for employment without regard to that individual’s age, race, color, religion or creed, national origin or ancestry, sex (including pregnancy), sexual orientation, gender, gender identity, physical or mental disability, veteran status, genetic information, ethnicity, citizenship, or any other characteristic protected by law. Cox provides reasonable accommodations when requested by a qualified applicant or employee with disability, unless such accommodations would cause an undue hardship.EOE, including disability/vets","description_format":"text","description_chars":8409,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Parental leave","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Broadcasting","Security Operations"],"lifecycle":[{"event":"open","at":"2026-10-06T20:25:08Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"green card filings: 2","filings_12m":0,"filings_prev_12m":0,"green_card_filings_12m":2,"median_offered_wage_usd":152500,"route":null,"cap_exempt":false,"checked_at":"2026-10-03T21:08:04+00:00","sources":["US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":5,"expected_fill_days":20,"reasons":["conf:3","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-10-12T06:55:09Z"},"pay":{"stated_usd_annual":204400,"is_top_pay":true},"html_url":"https://alion.io/job/cox-communications-lead-cybersecurity-detection-engineer","json_url":"https://alion.io/job/cox-communications-lead-cybersecurity-detection-engineer.json","meta":{"generated_at":"2026-10-12T09:13:29Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13959,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":8079},"rest":"https://alion.io/mcp/rest/get_company?id=8079"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcox-communications-lead-cybersecurity-detection-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcox-communications-lead-cybersecurity-detection-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcox-communications-lead-cybersecurity-detection-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cox-communications-lead-cybersecurity-detection-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcox-communications-lead-cybersecurity-detection-engineer"}]}