Cybersecurity Engineer II

The Continuous Control Monitoring (CCM) team, part of Enterprise Risk & Security, builds and operates DASH, Cox Automotive’s compliance monitoring platform. DASH brings together security and infrastructure data from CrowdStrike, Wiz, Qualys, Akamai, AWS, ServiceNow, GitHub, and other enterprise sources. We turn that data into controls, scoring, and dashboards that engineering teams and senior leaders use to understand and improve security posture across the company.

We’re a small, high-impact team that operates like a product engineering group. We work in an Agile lifecycle, ship through GitHub-based CI/CD, and use AI-assisted, spec-driven development as a core part of how we build. Our work is highly visible, from the engineers who remediate findings to the executives who track enterprise risk.

We’re looking for an engineer who is equally comfortable building data pipelines and building the applications people use to interact with that data. You’ll help extend DASH in two directions. First, you’ll build direct API-based ingestion from security and cloud platforms. Second, you’ll build a new AWS-hosted reporting front end that goes beyond what traditional BI tools can offer. You’ll also contribute to the platform as it exists today: new controls, Snowflake data models, and self-service tools for engineering teams across Cox Automotive.

• →Design, build, and operate API-based ingestion pipelines that pull data from security and cloud platforms, handling authentication, pagination, rate limits, incremental loads, and schema changes reliably.
• →Build and maintain a full-stack reporting application in AWS, including the front end, the API layer, and the infrastructure behind them, with attention to performance, access control, and usability.
• →Develop self-service tools that let engineering teams interact with CCM data directly, such as submitting suppressions and exceptions or receiving automated notifications.
• →Model and maintain data in Snowflake, writing well-tested SQL that powers controls, scoring, and trend reporting.
• →Contribute to new compliance controls and reporting domains as the program expands into new security domains.
• →Define infrastructure as code and ship through GitHub Actions pipelines with automated testing, environment promotion, and secure release practices.
• →Write clear specifications and documentation, and use AI-assisted development tools as a standard part of your workflow.
• →Partner with security, IAM, cloud, and engineering teams to understand their data and turn their needs into working features.

• Bachelor’s degree in a related discipline and 2 years’ experience in a related field. The right candidate could also have a different combination, such as a master’s degree and up to 2 years’ experience; or 14 years’ experience in a related field
• 2+ years of experience in software engineering, data engineering, or a combination of the two.
• Strong Python skills, including building and consuming REST APIs.
• Experience building web applications with a modern front-end framework and a backend API layer.
• Hands-on AWS experience with services such as Lambda, API Gateway, ECS/Fargate, S3, IAM, and CloudWatch.
• Infrastructure as code experience (Terraform, CDK, or CloudFormation).
• Strong SQL and experience with a cloud data warehouse, ideally Snowflake.
• Comfort with Git-based workflows and CI/CD, ideally GitHub Actions.
• The ability to take an ambiguous problem, break it down, and deliver it incrementally.
• Clear written communication, including the ability to explain technical work to non-technical stakeholders.

• Familiarity with security tools and their data, such as CrowdStrike, Wiz, Qualys, Akamai, or GitHub Advanced Security.
• Experience with compliance, controls monitoring, or GRC reporting.
• Power BI or Streamlit experience.
• Experience with containerized deployments and identity integrations such as SSO or SCIM.
• Experience using AI coding assistants and agentic workflows in day-to-day development.