layiq

/la·yiq/adjective

worthy; deserving; fitting; suitable.

A role, opportunity, or path that merits attention, time, and pursuit.

LAYIQ - Lead Cybersecurity Detection Engineer at Cox Automotive

What You'll Do

Cybersecurity Detection Engineering: Serve as a senior technical lead for detection engineering, building and maintaining detective solutions that protect Cox Automotive’s internal systems as well as its domestic and international businesses.
Contribute to and help execute the Detection Engineering strategy, roadmap, and objectives.
Architect and deploy agentic AI systems that autonomously detect, analyze, and respond to security threats across enterprise infrastructure.
Design multi-agent frameworks where specialized AI agents collaborate on threat hunting, incident investigation, and attack pattern recognition.
Develop self-improving detection systems that learn from each investigation and automatically enhance detection rules and playbooks.
Design and implement advanced threat detection techniques using tools such as SIEM, EDR, and SOAR platforms.
Develop innovative custom detection rules and automated remediation playbooks and alerts tailored to the Cox Automotive’s enterprise and customer threat landscape.
Leverage industry standard MITRE/ATLAS frameworks to identify detection coverage and close gaps.
Monitor, optimize, and continuously improve detection systems for performance, scalability, and effectiveness.
Collaborate with Threat Detection and Response team to continuously improve cybersecurity capabilities in identification, management, and response to threats in the most efficient and effective manner.
Perform attack simulation testing to validate efficacy of use cases.
Conduct purple teaming exercises in collaboration with the Vulnerability Management team.
Manage and maintain SIEM/Data Lake data management and log ingestion infrastructure in collaboration with Cyber Defense Engineering counterparts.
Evaluate, validate, tune, and sunset detections as needed.
Build and maintain operational guidelines, diagrams, and documentation for security detection and response.
Provide off-hour support as needed for security administration, detection, and response activities.
Incident Response: Collaborate with the Incident Response team to ensure rapid detection and containment of cyber threats.
Build threat detection logic during incident response to accelerate threat identification and containment.
Continuously improve detection and response processes based on lessons learned from incidents.
Threat Intelligence Integration: Leverage threat intelligence to enhance detection capabilities and proactively mitigate risks.
Identify and analyze new and emerging threat vectors and incorporate them into detection strategies.
Stakeholder Collaboration: Partner with other Cybersecurity, Engineering, and Product teams to ensure successful deployment of detection and response solutions.
Collaborate with Product teams to design and implement new customer-focused detection and response solutions.
Communicate detection capabilities, findings, and technical recommendations clearly to technical and non-technical stakeholders, escalating to leadership as needed.
Governance and Compliance: Design and implement processes that adhere to regulatory requirements and industry standards (e.g., GDPR, PCI-DSS, NIST).
Maintain documentation of detection use cases, processes, and configurations.
Who You Are

Minimum Qualifications

Bachelor’s degree in Computer Science or a related discipline and 6+ years of industry related professional experience
Multi-cloud security experience (AWS, Azure, GCP)
Experience with AI/ML frameworks and prompt engineering for security applications
Expert level knowledge of Detection Engineering
Strong experience with information security, network security, security monitoring, and Incident Response.
Strong experience with developing SIEM/SOAR detection and automation use cases.
Working experience with industry standard security technologies and services such as threat intelligence, firewalls, SASE, IPS, endpoint security, DLP, SIEM/SOAR, and Data Lakes.
Expert level knowledge on the attack kill chain and diamond model.
3+ years experience in a cyber defense role

Preferred Qualifications

OSCP, GSEC, GCIA, GFE, GCFA, CISA, CISSP, CISM, or CIA certification(s)
Dev Ops / Engineering / Network / System Administration experience
Experience developing customer-focused detection and response systems
Drug Testing
To be employed in this role, you’ll need to clear a pre-employment drug test. Cox Automotive does not currently administer a pre-employment drug test for marijuana for this position. However, we are a drug-free workplace, so the possession, use or being under the influence of drugs illegal under federal or state law during work hours, on company property and/or in company vehicles is prohibited.

Lead Cybersecurity Detection Engineer

Employer job description

Compensation

What You'll Do

Minimum Qualifications

Preferred Qualifications

Benefits

About Us

About this listing

Listing check

Similar jobs

Similar jobs