{"id":3790253,"url":"https://alion.io/job/qxo-senior-manager-cybersecurity-operations","title":"Senior Manager, Cybersecurity Operations","company":{"id":2455029,"name":"QXO","domain":"qxo.com","url":"https://alion.io/company/qxo","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":{"grade":"A","score":100,"open_postings":7,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":10,"computed_at":"2026-11-10T06:52:35Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Charlotte, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":140400,"max":210600,"currency":"USD","period":"year","gross":null,"usd_annual":210600},"salary_estimate":null,"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-11-05T06:21:02Z","employer_posted_date":"2026-11-05","last_verified_at":"2026-11-11T01:46:08Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"Overview\nAs a Senior Manager, Cybersecurity Operations at QXO, you'll be a key member of the Cybersecurity Team, providing operational leadership and direction for the company's detect and respond capabilities. This role is responsible for leading teams and working directly across multiple disciplines, technical levels, and business groups to ensure the continuous monitoring, threat detection, incident response, and threat intelligence functions that protect QXO's systems and information assets. The senior manager ensures security operations teams execute with excellence, scales detect and respond capabilities and drives continuous improvement of QXO's security posture and incident response maturity.\nQXO is a leading distributor and installer of building products serving an $800 billion market. The company’s mission is to modernize the building products industry through advanced technology and a best-in-class customer experience. QXO is North America’s largest distributor and installer of insulation, the second-largest distributor of roofing products, the second-largest publicly traded distributor of lumber and building materials, and the largest distributor of waterproofing products. The company is targeting $50 billion in annual revenue within the decade through accretive acquisitions and organic growth. For more information, visit QXO.com.\nWhat you will do:\nLead and manage the Security Operations team, including team leadership, daily operations, alert triage, threat intelligence, incident detection and initial response.\nLead incident response coordination, including triage, containment, remediation, and post-incident analysis with appropriate escalation to leadership and stakeholders.\nOversee managed security services (MDR, SIEM, EDR, threat intelligence, etc.) to ensure effective delivery and alignment with QXO's security objectives.\nOwn detection engineering and threat hunting activities to identify and escalate emerging threats, anomalies, and security incidents affecting QXO.\nManage and develop high-performing cybersecurity analysts, emphasizing career growth, skill development, and retention through people-first leadership.\nBuild and maintain threat intelligence programs, including tracking threat actors, TTPs, vulnerabilities, and malware trends relevant to QXO.\nAuthor and maintain security operations procedures, runbooks, playbooks, and standard work to ensure consistent and effective threat response.\nPrepare detailed incident reports and root cause analyses, documenting containment, remediation, and after-action reports (AARs) to drive continuous improvement.\nDevelop and execute the detection and response roadmap, identifying capability gaps, recommending technology investments, and guiding maturation efforts.\nOpenly support the management team and executive leadership during critical security incidents and organizational transitions.\nPartner with infrastructure, application security, and IT teams to validate security controls, coordinate remediation efforts, and drive risk mitigation.\nReport on security operations metrics, Key Risk Indicators (KRIs), and incident trends to leadership, translating technical findings into business context.\nSupport security awareness and training initiatives, educating the organization on threats, phishing campaigns, and incident reporting procedures.\nInterface with legal, compliance, and risk management teams as needed to support investigations and operations.\nCollaborate with procurement and IT to evaluate and implement new detection and response technologies.\nEngage with external partners, industry peers, and vendors to stay current on threat landscape, detection technologies, and incident response best practices.\nPerform other duties as assigned.\nWhat you will bring:\nSkills and Experience\nAt least 7+ years’ experience in cybersecurity across detection, incident response, threat intelligence, and security operations.\n3 or more years in a management or senior individual contributor role leading or influencing security operations teams.\nDeep hands-on expertise in SOC operations, SIEM platforms, EDR tools, and security information and event management.\nExpert-level knowledge of incident response methodologies, the Cyber Kill Chain, and intelligence-driven response practices.\nStrong background in threat intelligence, threat actor tracking, malware analysis, and Advanced Persistent Threats (APTs).\nExperience with digital forensic techniques, log analysis, and network traffic analysis.\nDemonstrated ability to lead and motivate technical teams, build cohesion, and foster a strong security culture.\nCapability to work effectively with diverse technical and business teams, translating technical issues into business context.\nStrong written and verbal communication skills; ability to present technical findings to both technical and executive audiences.\nAdditional Qualifications\nProven trustworthiness and history of acting with integrity, taking pride in work, seeking to excel, being curious and adaptable, and communicating well.\nResults-oriented with strong problem-solving and decision-making skills in high-pressure environments.\nSelf-starter requiring minimal supervision; capable of working independently and collaboratively as needed.\nEducation Requirements\nBachelor's degree in computer science, information assurance, MIS, or related field, or equivalent professional experience.\nCertification Requirements\nPreferable, but not required: SANS GIAC certification, CISSP or equivalent.\nWhat you will earn:\nBase pay range: $140,400 - $210,600\nAnnual performance bonus\nLong term incentive (equity/stock)\n401(k) with employer match\nMedical, dental, and vision insurance\nPTO, company holidays, and parental leave\nPaid Time Off/Paid Sick Leave: Applicants can expect to accrue 15 days of paid time off during their first year (4.62 hours for every 80 hours worked) and increased accruals after five years of service.\nPaid training and certifications\nLegal assistance and identity protection\nPet insurance\nEmployee assistance program (EAP)\nTo comply with Pay Transparency laws, employers must disclose an annual salary range. Actual offers depend on factors such as location, experience, skills, and market data. This position may also offer variable compensation.\nPlease contact  if you have any questions related to this job posting.\nQXO is an Equal Opportunity Employer. We value diversity and do not discriminate on the basis of race, color, religion, gender or sexual orientation, national origin, age, disability, or any other protected status.\nPay Range\nUSD $140,400.00 - USD $210,600.00 /Yr.","description_format":"text","description_chars":6641,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":3,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Equity","Parental leave","Vision insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Wholesale","Building Materials"],"lifecycle":[{"event":"open","at":"2026-11-05T06:21:02Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 14","filings_12m":14,"filings_prev_12m":0,"green_card_filings_12m":0,"median_offered_wage_usd":207500,"route":null,"cap_exempt":false,"checked_at":"2026-11-10T11:34:35+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":1}],"liveness":{"score":81,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.901,"p_room":0.9,"age_days":5,"expected_fill_days":10,"reasons":["conf:2","velocity","win:mid","comp:brand"],"computed_at":"2026-11-10T06:52:35Z"},"pay":{"stated_usd_annual":210600,"is_top_pay":true},"html_url":"https://alion.io/job/qxo-senior-manager-cybersecurity-operations","json_url":"https://alion.io/job/qxo-senior-manager-cybersecurity-operations.json","meta":{"generated_at":"2026-11-11T02:57:14Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1669,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2455029},"rest":"https://alion.io/mcp/rest/get_company?id=2455029"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fqxo-senior-manager-cybersecurity-operations"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fqxo-senior-manager-cybersecurity-operations"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fqxo-senior-manager-cybersecurity-operations"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/qxo-senior-manager-cybersecurity-operations\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fqxo-senior-manager-cybersecurity-operations"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3790253}},{"tool":"search_jobs","arguments":{"company":"qxo.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3790253},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}