Your browser does not support javascript! Please enable it, otherwise web will not work for you.

Lead Cybersecurity Detection Engineer

Home > Other programming jobs

Lead Cybersecurity Detection Engineer in USA

  • Cox Automotive
  • Full time
  • Email
  • Atlanta, GA

Responsibilities

  • Lead the design, implementation, tuning, and maintenance of enterprise and customer-focused cybersecurity detection capabilities.
  • Architect agentic AI and multi-agent systems for threat detection, hunting, investigation, attack-pattern recognition, and automated response.
  • Develop custom detection rules, alerts, remediation playbooks, and SIEM/SOAR automation use cases.
  • Manage SIEM, data-lake, and log-ingestion infrastructure and improve detection performance, scalability, and coverage.
  • Collaborate with Incident Response, Threat Intelligence, Vulnerability Management, Cybersecurity, Engineering, and Product teams.
  • Conduct attack simulation and purple-team exercises and incorporate threat intelligence and incident lessons into detection strategies.
  • Support governance, regulatory compliance, documentation, off-hours security administration, and response activities.
  • Provide hands-on technical leadership, mentorship, and technical communication to technical and non-technical stakeholders.

Requirements

  • Bachelor’s degree in Computer Science or a related discipline and 6+ years of industry-related professional experience.
  • At least 3 years of experience in a cyber defense role.
  • Multi-cloud security experience with AWS, Azure, and GCP.
  • Experience with AI/ML frameworks and prompt engineering for security applications.
  • Expert-level Detection Engineering knowledge and strong experience in information security, network security, security monitoring, and Incident Response.
  • Strong experience developing SIEM/SOAR detection and automation use cases.
  • Experience with threat intelligence, firewalls, SASE, IPS, endpoint security, DLP, SIEM/SOAR, and data lakes.
  • Expert knowledge of the attack kill chain and diamond model.
  • Preferred certifications include OSCP, GSEC, GCIA, GFE, GCFA, CISA, CISSP, CISM, or CIA.
  • DevOps, engineering, network, or systems administration experience and customer-focused detection and response development experience are preferred.

Cox Automotive

Cox Automotive is the world’s largest automotive services and technology provider. Fueled by the largest breadth of first- and third-party data fed by 2.3 billion online interactions a year, Cox Automotive tailors leading solutions for car shoppers, auto manufacturers, dealers, lenders and fleets...

Similar positions

Product Security Engineer

  • Base Power Company
  • Full time
  • USA
  • 10/15/2026
  • Austin, TX

(Junior) DevOps Engineer Voice

  • Koninklijke KPN N.V.
  • Full time
  • Others
  • 10/15/2026
  • Salary: DOE
  • Rotterdam, Netherlands

Full-Stack Engineer - Studio

  • ElevenLabs
  • Full time
  • Remote
  • 10/15/2026
  • Worldwide

Software Engineer

  • Asana
  • Full time
  • USA
  • 10/15/2026
  • Salary: $171k - $190k/yr
  • San Francisco, CA

Senior AI Platform / DevTool Engineer

  • Progress Partners
  • Full time
  • Remote
  • 10/15/2026
  • Europe, Georgia