Cybersecurity Detection Engineer II -
Core
Build, tune, and maintain enterprise- and customer-focused detection capabilities using AI-assisted workflows, SIEM log analysis, and automation to protect internal systems and automotive business portfolios.
Role type
Senior IC cybersecurity detection engineer
Builds
AI-assisted detection workflows, automated remediation playbooks, and alerts for Cox Automotive's internal systems and customer platforms
Domain
Cybersecurity, SIEM, Threat Detection, Automotive Technology
Deliverable
production ML models
Required skills
SIEM log analysis, detection rule development, AI tools and prompt engineering, MITRE ATT&CK framework, incident response fundamentals, cloud security (AWS/Azure/GCP), SOAR platforms, Python scripting
Preferred skills
Security certifications (Security+, GSEC, GCIA, SC-200), AI/ML framework experience, multi-cloud security expertise, DevOps experience
Technologies
SIEM, EDR, SOAR, MITRE ATT&CK, ATLAS, Python, AWS, Azure, GCP
Responsibilities
Build and maintain detection rules and automated playbooks; use AI tools for query writing and log analysis; monitor detection performance and tune to reduce false positives; collaborate on incident response and threat intelligence integration; perform attack simulation testing; support purple teaming exercises; maintain operational guidelines and documentation.
Seniority
Mid-level IC (2+ years experience)