Cybersecurity Engineer II

Company

• Cox Automotive - USA
• Job Family Group
• Information Technology

Job Profile

• Cybersecurity Engineer II
• Management Level
• Individual Contributor
• Flexible Work Option
• Hybrid - Ability to work remotely part of the week

Travel %

No

Work Shift

Day

About the team

The Continuous Control Monitoring (CCM) team, part of Enterprise Risk & Security, builds and operates DASH, Cox Automotive’s compliance monitoring platform. DASH brings together security and infrastructure data from CrowdStrike, Wiz, Qualys, Akamai, AWS, ServiceNow, GitHub, and other enterprise sources. We turn that data into controls, scoring, and dashboards that engineering teams and senior leaders use to understand and improve security posture across the company.

We’re a small, high-impact team that operates like a product engineering group. We work in an Agile lifecycle, ship through GitHub-based CI/CD, and use AI-assisted, spec-driven development as a core part of how we build. Our work is highly visible, from the engineers who remediate findings to the executives who track enterprise risk.

About the role

We’re looking for an engineer who is equally comfortable building data pipelines and building the applications people use to interact with that data. You’ll help extend DASH in two directions. First, you’ll build direct API-based ingestion from security and cloud platforms. Second, you’ll build a new AWS-hosted reporting front end that goes beyond what traditional BI tools can offer.

You’ll also contribute to the platform as it exists today: new controls, Snowflake data models, and self-service tools for engineering teams across Cox Automotive.

What You'll Do:

• Design, build, and operate API-based ingestion pipelines that pull data from security and cloud platforms, handling authentication, pagination, rate limits, incremental loads, and schema changes reliably.
• Build and maintain a full-stack reporting application in AWS, including the front end, the API layer, and the infrastructure behind them, with attention to performance, access control, and usability.
• Develop self-service tools that let engineering teams interact with CCM data directly, such as submitting suppressions and exceptions or receiving automated notifications.
• Model and maintain data in Snowflake, writing well-tested SQL that powers controls, scoring, and trend reporting.
• Contribute to new compliance controls and reporting domains as the program expands into new security domains.
• Define infrastructure as code and ship through GitHub Actions pipelines with automated testing, environment promotion, and secure release practices.
• Write clear specifications and documentation, and use AI-assisted development tools as a standard part of your workflow.
• Partner with security, IAM, cloud, and engineering teams to understand their data and turn their needs into working features.
• Who You Are: Bachelor’s degree in a related discipline and 2 years’ experience in a related field. The right candidate could also have a different combination, such as a master’s degree and up to 2 years’ experience; or 14 years’ experience in a related field
• 2+ years of experience in software engineering, data engineering, or a combination of the two.
• Strong Python skills, including building and consuming REST APIs.
• Experience building web applications with a modern front-end framework and a backend API layer.
• Hands-on AWS experience with services such as Lambda, API Gateway, ECS/Fargate, S3, IAM, and CloudWatch.
• Infrastructure as code experience (Terraform, CDK, or CloudFormation).
• Strong SQL and experience with a cloud data warehouse, ideally Snowflake.
• Comfort with Git-based workflows and CI/CD, ideally GitHub Actions.
• The ability to take an ambiguous problem, break it down, and deliver it incrementally.
• Clear written communication, including the ability to explain technical work to non-technical stakeholders.
• Nice to have
• Familiarity with security tools and their data, such as CrowdStrike, Wiz, Qualys, Akamai, or GitHub Advanced Security.
• Experience with compliance, controls monitoring, or GRC reporting.
• Power BI or Streamlit experience.
• Experience with containerized deployments and identity integrations such as SSO or SCIM.
• Experience using AI coding assistants and agentic workflows in day-to-day development.

Why join us

You’ll be helping to build a platform that directly shapes how Cox Automotive measures and reduces security risk. Your work will be used every day, and you’ll have real influence over the architecture as we move into API-driven ingestion and custom application development. You’ll work on a team that invests in modern engineering practices and in the growth of the people on it.

Drug Testing

To be employed in this role, you’ll need to clear a pre-employment drug test. Cox Automotive does not currently administer a pre-employment drug test for marijuana for this position. However, we are a drug-free workplace, so the possession, use or being under the influence of drugs illegal under federal or state law during work hours, on company property and/or in company vehicles is prohibited.

About Us

Through groundbreaking technology and a commitment to stellar experiences for drivers and dealers alike, Cox Automotive employees are transforming the way the world buys, owns, sells – or simply uses – cars. Cox Automotive employees get to work on iconic consumer brands like Autotrader and Kelley Blue Book and industry-leading dealer-facing companies like vAuto and Manheim, all while enjoying the people-centered atmosphere that is central to our life at Cox.

Benefits of working at Cox may include health care insurance (medical, dental, vision), retirement planning (401(k)), and paid days off (sick leave, parental leave, flexible vacation/wellness days, and/or PTO). For more details on what benefits you may be offered, visit our benefits page.

Cox is an Equal Employment Opportunity employer – All qualified applicants/employees will receive consideration for employment without regard to that individual’s age, race, color, religion or creed, national origin or ancestry, sex (including pregnancy), sexual orientation, gender, gender identity, physical or mental disability, veteran status, genetic information, ethnicity, citizenship, or any other characteristic protected by law.

Cox provides reasonable accommodations when requested by a qualified applicant or employee with disability, unless such accommodations would cause an undue hardship.

EOE, including disability/vets

Applicants must currently be authorized to work in the United States for any employer without current or future sponsorship. No OPT, CPT, STEM/OPT or visa sponsorship now or in future.