About the team
The Continuous Control Monitoring (CCM) team, part of Enterprise Risk & Security, builds and operates DASH, Cox Automotive’s compliance monitoring platform. DASH brings together security and infrastructure data from CrowdStrike, Wiz, Qualys, Akamai, AWS, ServiceNow, GitHub, and other enterprise sources. We turn that data into controls, scoring, and dashboards that engineering teams and senior leaders use to understand and improve security posture across the company.
We’re a small, high-impact team that operates like a product engineering group. We work in an Agile lifecycle, ship through GitHub-based CI/CD, and use AI-assisted, spec-driven development as a core part of how we build. Our work is highly visible, from the engineers who remediate findings to the executives who track enterprise risk.
About the role
We’re looking for an engineer who is equally comfortable building data pipelines and building the applications people use to interact with that data. You’ll help extend DASH in two directions. First, you’ll build direct API-based ingestion from security and cloud platforms. Second, you’ll build a new AWS-hosted reporting front end that goes beyond what traditional BI tools can offer. You’ll also contribute to the platform as it exists today: new controls, Snowflake data models, and self-service tools for engineering teams across Cox Automotive.
What You'll Do:
- Design, build, and operate API-based ingestion pipelines that pull data from security and cloud platforms, handling authentication, pagination, rate limits, incremental loads, and schema changes reliably.
- Build and maintain a full-stack reporting application in AWS, including the front end, the API layer, and the infrastructure behind them, with attention to performance, access control, and usability.
- Develop self-service tools that let engineering teams interact with CCM data directly, such as submitting suppressions and exceptions or receiving automated notifications.
- Model and maintain data in Snowflake, writing well-tested SQL that powers controls, scoring, and trend reporting.
- Contribute to new compliance controls and reporting domains as the program expands into new security domains.
- Define infrastructure as code and ship through GitHub Actions pipelines with automated testing, environment promotion, and secure release practices.
- Write clear specifications and documentation, and use AI-assisted development tools as a standard part of your workflow.
- Partner with security, IAM, cloud, and engineering teams to understand their data and turn their needs into working features.
Who You Are:
- Bachelor’s degree in a related discipline and 2 years’ experience in a related field. The right candidate could also have a different combination, such as a master’s degree and up to 2 years’ experience; or 14 years’ experience in a related field
- 2+ years of experience in software engineering, data engineering, or a combination of the two.
- Strong Python skills, including building and consuming REST APIs.
- Experience building web applications with a modern front-end framework and a backend API layer.
- Hands-on AWS experience with services such as Lambda, API Gateway, ECS/Fargate, S3, IAM, and CloudWatch.
- Infrastructure as code experience (Terraform, CDK, or CloudFormation).
- Strong SQL and experience with a cloud data warehouse, ideally Snowflake.
- Comfort with Git-based workflows and CI/CD, ideally GitHub Actions.
- The ability to take an ambiguous problem, break it down, and deliver it incrementally.
- Clear written communication, including the ability to explain technical work to non-technical stakeholders.
Nice to have
- Familiarity with security tools and their data, such as CrowdStrike, Wiz, Qualys, Akamai, or GitHub Advanced Security.
- Experience with compliance, controls monitoring, or GRC reporting.
- Power BI or Streamlit experience.
- Experience with containerized deployments and identity integrations such as SSO or SCIM.
- Experience using AI coding assistants and agentic workflows in day-to-day development.
Why join us
You’ll be helping to build a platform that directly shapes how Cox Automotive measures and reduces security risk. Your work will be used every day, and you’ll have real influence over the architecture as we move into API-driven ingestion and custom application development. You’ll work on a team that invests in modern engineering practices and in the growth of the people on it.
Drug Testing:
To be employed in this role, you'll need to clear a pre-employment drug test. Cox Automotive does not currently administer a pre-employment drug test for marijuana for this position. However, we are a drug-free workplace, so the possession, use or being under the influence of drugs illegal under federal or state law during work hours, on company property and/or in company vehicles is prohibited.
Compensation:
Compensation includes a base salary in the range of $89,400.00 - $134,000.00. The base salary may vary within the anticipated base pay range based on factors such as the ultimate location of the position and the selected candidate’s knowledge, skills, and abilities. Position may be eligible for additional compensation that may include an incentive program.
Benefits:
The Company offers eligible employees the flexibility to take as much vacation with pay as they deem consistent with their duties, the company’s needs, and its obligations; seven paid holidays throughout the calendar year; and up to 160 hours of paid wellness annually for their own wellness or that of family members. Employees are also eligible for additional paid time off in the form of bereavement leave, time off to vote, jury duty leave, volunteer time off, military leave, and parental leave.
Applicants must currently be authorized to work in the United States for any employer without current or future sponsorship.
EOE, including disability/vets
