{"id":1986474,"url":"https://alion.io/job/us-lbm-us-lbm-engineer-cybersecurity-operations","title":"US LBM Engineer - Cybersecurity Operations","company":{"id":2444953,"name":"US LBM","domain":"uslbm.com","url":"https://alion.io/company/uslbm","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"inferred_payroll_markers","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":100000,"max":120000,"currency":"USD","period":"year","gross":null,"usd_annual":120000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"Copilot","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-07T01:04:50Z","employer_posted_date":null,"last_verified_at":"2026-10-07T01:04:50Z","board_verified":false,"closed_at":null,"days_open":7,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":7},"description":"US LBM is one of the leading and fastest growing distributors of specialty building materials in the United States, with a team of over 13,000 employees located throughout the country. Since our founding in 2009, we have acquired over 100 companies and have expanded to more than 450 locations serving 37 states. US LBM is a progressive organization that promotes a unique culture that focuses on the value of its customers and associates. Developing our people is critical to our strategy and fostering our culture of empowerment.\n.A Brief Overview\nThe US LBM Engineer - Cybersecurity Operations is a hands-on technical role responsible for monitoring, detecting, investigating, and responding to cyber threats across US LBM's Microsoft security environment. This position supports Microsoft Sentinel, Microsoft Defender XDR, Attack Surface Reduction (ASR), threat hunting, incident response, automation, and security for Microsoft 365 Copilot and AI technologies.\nPay Rate: $100K - $120K annual salary\n\nWhat you will do\n\nMonitor, investigate, and respond to cybersecurity alerts, incidents, and threats across enterprise and cloud environments.\n\nAdminister and optimize Microsoft Sentinel, including log collections, integrations, connectors, analytics rules, watchlists, threat intelligence integrations, and dashboards.\n\nWorking with the Cyber Solutions team, support and maintain Microsoft Defender XDR, Defender for Endpoint, Defender for Identity, Defender for Office 365, Defender for Cloud Apps, and Defender for Cloud.\n\nDevelop and tune detections, alerts, and KQL queries to improve visibility and reduce false positives.\n\nPerform threat hunting and security investigations using Defender XDR and Sentinel.\n\nCoach and mentor junior cybersecurity analysts by providing guidance on investigations, threat hunting, detection engineering, Microsoft security technologies, and incident response best practices.\n\nImplement and maintain automation using Sentinel Automation Rules and Logic Apps.\n\nManage, monitor, and maintain health of Microsoft Defender for Endpoint, and cyber related agents Support and collaborate in the establishment and maintenance of server and workstation security baselines, including QA check on server builds.\n\nOptimize Microsoft Defender for Endpoint security controls, including Attack Surface Reduction (ASR) rules and endpoint hardening.\n\nSupport security controls, governance, and monitoring for Microsoft 365 Copilot and AI-enabled technologies.\n\nCoordinate penetration testing engagements and track remediation activities.\n\nSupport purple team exercises and validate the effectiveness of security detections and response capabilities.\n\nCollaborate with infrastructure, cloud, identity, and application teams to improve security posture.\n\nDevelop and maintain operational procedures, runbooks, and technical documentation.\n\nRequired For All Jobs\nPerform other duties as assigned.\n\nComply with all policies and standards.\n\nAdhere to Company’s commitment to workplace safety.\n\nParticipate in and complete assigned trainings.\n\nEducation QualificationsBachelor's Degree in Cybersecurity, Information Technology, Computer Science, or a related field.\nExperience Qualifications\n3+ years of experience in cybersecurity operations, security engineering, or incident response.\n\nHands-on experience with Microsoft Defender XDR technologies.\n\nExperience with Microsoft Sentinel.\n\nExperience investigating security incidents involving endpoints, identities, phishing, malware, and cloud services.\n\nExperience writing KQL queries for threat hunting, investigations, and detection engineering.\n\nExperience implementing and managing Microsoft Attack Surface Reduction (ASR) rules.\n\nSkills and Abilities\nStrong understanding of security operations, threat hunting, detection engineering, and incident response.\n\nWorking knowledge of Windows, Active Directory, Microsoft Entra ID, networking, and cloud security.\n\nStrong analytical and problem-solving skills.\n\nExperience with Microsoft Azure Cloud environment and typical hybrid environment preferred.\n\nExperience with Microsoft Intune preferred.\n\nExperiencing implementing automated desired state configuration, server baselines, and CIS benchmarking preferred.\n\nExperience with Tenable products or other vulnerability management solutions preferred.\n\nExperience with purple team exercises and security control validation preferred.\n\nLicenses and CertificationsSC-200, AZ-500, Security+, CISSP, or similar certifications preferred.\nTravel Requirements10% Travel.\n.Click Here for Information Regarding Our Benefits\n\nUS LBM Holdings, LLC, is an equal-opportunity employer. We do not discriminate on the basis of race, color, religion, creed, national origin or ancestry, sex, age, physical or mental disability, veteran or military status, genetic information, sexual orientation, gender identity, marital status, military status, order of protection status, or any other legally recognized protected basis under federal, state, or local law. \nOriginally posted on Himalayas","description_format":"text","description_chars":5046,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Professional Services","Incident Response"],"lifecycle":[{"event":"open","at":"2026-10-07T02:28:00Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":7,"expected_fill_days":27,"reasons":["seen:7","win:early"],"computed_at":"2026-10-14T06:34:16Z"},"pay":{"stated_usd_annual":120000,"is_top_pay":false},"html_url":"https://alion.io/job/us-lbm-us-lbm-engineer-cybersecurity-operations","json_url":"https://alion.io/job/us-lbm-us-lbm-engineer-cybersecurity-operations.json","meta":{"generated_at":"2026-10-14T13:21:31Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"search","counted_by":"address","units_charged":0,"used_today":0,"day_limit":null,"remaining_today":null,"minute_limit":null,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2444953},"rest":"https://alion.io/mcp/rest/get_company?id=2444953"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fus-lbm-us-lbm-engineer-cybersecurity-operations"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fus-lbm-us-lbm-engineer-cybersecurity-operations"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fus-lbm-us-lbm-engineer-cybersecurity-operations"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/us-lbm-us-lbm-engineer-cybersecurity-operations\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fus-lbm-us-lbm-engineer-cybersecurity-operations"}]}