Senior Manager, Cybersecurity Operations

QXO•Charlotte, NC

6d•$140,400 - $210,600

About The Position

As a Senior Manager, Cybersecurity Operations at QXO, you will provide operational leadership and direction for the company’s detection and response capabilities. You will lead teams and work across disciplines, technical levels, and business groups to support continuous monitoring, threat detection, incident response, and threat intelligence. The role is responsible for scaling these capabilities, ensuring operational excellence, and continuously improving QXO’s security posture and incident response maturity. QXO is a distributor and installer of building products serving an $800 billion market. Its mission is to modernize the building products industry through advanced technology and a best-in-class customer experience. The company is targeting $50 billion in annual revenue within the decade through acquisitions and organic growth.

Requirements

At least 7 years of cybersecurity experience across detection, incident response, threat intelligence, and security operations.
At least 3 years in a management or senior individual contributor role leading or influencing security operations teams.
Deep hands-on expertise in SOC operations, SIEM platforms, and EDR tools.
Expert-level knowledge of incident response methodologies, the Cyber Kill Chain, and intelligence-driven response practices.
Strong background in threat intelligence, threat actor tracking, malware analysis, and Advanced Persistent Threats.
Experience with digital forensic techniques, log analysis, and network traffic analysis.
Ability to lead and motivate technical teams, build cohesion, and foster a strong security culture.
Ability to work effectively with diverse technical and business teams and translate technical issues into business context.
Strong written and verbal communication skills, including presenting technical findings to technical and executive audiences.
History of trustworthiness and integrity, pride in work, a drive to excel, curiosity, adaptability, and effective communication.
Results-oriented approach with strong problem-solving and decision-making skills in high-pressure environments.
Self-starter who requires minimal supervision and can work independently and collaboratively.
Bachelor’s degree in computer science, information assurance, MIS, or a related field, or equivalent professional experience.

Nice To Haves

SANS GIAC certification, CISSP, or equivalent certification; preferred but not required.

Responsibilities

Lead and manage the Security Operations team, including team leadership, daily operations, alert triage, threat intelligence, incident detection, and initial response.
Coordinate incident response, including triage, containment, remediation, post-incident analysis, and escalation to leadership and stakeholders.
Oversee managed security services, including MDR, SIEM, EDR, and threat intelligence, to ensure effective delivery and alignment with security objectives.
Own detection engineering and threat hunting to identify and escalate emerging threats, anomalies, and security incidents.
Develop cybersecurity analysts through career growth, skill development, and retention-focused leadership.
Build and maintain threat intelligence programs covering threat actors, TTPs, vulnerabilities, and relevant malware trends.
Author and maintain security operations procedures, runbooks, playbooks, and standard work.
Prepare incident reports and root cause analyses, documenting containment, remediation, and after-action reports to support continuous improvement.
Develop and execute the detection and response roadmap, identify capability gaps, recommend technology investments, and guide capability maturation.
Support management and executive leadership during critical security incidents and organizational transitions.
Partner with infrastructure, application security, and IT teams to validate security controls, coordinate remediation, and mitigate risk.
Report security operations metrics, Key Risk Indicators, and incident trends to leadership, translating technical findings into business context.
Support security awareness and training initiatives about threats, phishing campaigns, and incident reporting procedures.
Work with legal, compliance, and risk management teams as needed to support investigations and operations.
Collaborate with procurement and IT to evaluate and implement detection and response technologies.
Engage with external partners, industry peers, and vendors to stay current on threats, detection technologies, and incident response practices.
Perform other duties as assigned.