Senior Manager, Cybersecurity Operations

QXO

. Lead and manage the Security Operations team, including team leadership, daily operations, alert triage, threat intelligence, incident detection and initial response.

Posted 11/4/2026full-timeCharlotte • North Carolina • United StatesSenior💰 $140,400 - $210,600 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in cybersecurity operations, incident response methodologies, and threat intelligence, with a strong focus on team leadership and development. Capable of translating technical findings into business context while managing security operations and fostering a culture of security awareness.

Highest-signal resume keywords

Cybersecurity Operations ManagementIncident Response MethodologiesThreat Intelligence AnalysisSIEM Platforms ExpertiseTeam Leadership and Development

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident DetectionThreat HuntingDigital ForensicsLog AnalysisNetwork Traffic AnalysisMalware AnalysisSecurity Operations ProceduresRoot Cause AnalysisDetection EngineeringThreat Actor Tracking

Soft Skills

Strong Communication SkillsProblem-Solving SkillsDecision-Making SkillsTeam MotivationAdaptability

Tools & Technologies

MDRSIEMEDRThreat Intelligence PlatformsCyber Kill Chain

Certifications & Qualifications

SANS GIAC CertificationCISSP

Industry Keywords

Security OperationsIncident ResponseThreat IntelligenceAdvanced Persistent ThreatsKey Risk Indicators

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Lead and manage the Security Operations team, including team leadership, daily operations, alert triage, threat intelligence, incident detection and initial response.
Lead incident response coordination, including triage, containment, remediation, and post-incident analysis with appropriate escalation to leadership and stakeholders.
Oversee managed security services (MDR, SIEM, EDR, threat intelligence, etc.) to ensure effective delivery and alignment with QXO's security objectives.
Own detection engineering and threat hunting activities to identify and escalate emerging threats, anomalies, and security incidents affecting QXO.
Manage and develop high-performing cybersecurity analysts, emphasizing career growth, skill development, and retention through people-first leadership.
Build and maintain threat intelligence programs, including tracking threat actors, TTPs, vulnerabilities, and malware trends relevant to QXO.
Author and maintain security operations procedures, runbooks, playbooks, and standard work to ensure consistent and effective threat response.
Prepare detailed incident reports and root cause analyses, documenting containment, remediation, and after-action reports (AARs) to drive continuous improvement.
Develop and execute the detection and response roadmap, identifying capability gaps, recommending technology investments, and guiding maturation efforts.
Support management and executive leadership during critical security incidents and organizational transitions.
Partner with infrastructure, application security, and IT teams to validate security controls, coordinate remediation efforts, and drive risk mitigation.
Report on security operations metrics, Key Risk Indicators (KRIs), and incident trends to leadership, translating technical findings into business context.
Support security awareness and training initiatives, educating the organization on threats, phishing campaigns, and incident reporting procedures.
Interface with legal, compliance, and risk management teams as needed to support investigations and operations.
Collaborate with procurement and IT to evaluate and implement new detection and response technologies.
Engage with external partners, industry peers, and vendors to stay current on threat landscape, detection technologies, and incident response best practices.
Perform other duties as assigned.

Requirements

What you’ll need

At least 7+ years’ experience in cybersecurity across detection, incident response, threat intelligence, and security operations.
3 or more years in a management or senior individual contributor role leading or influencing security operations teams.
Deep hands-on expertise in SOC operations, SIEM platforms, EDR tools, and security information and event management.
Expert-level knowledge of incident response methodologies, the Cyber Kill Chain, and intelligence-driven response practices.
Strong background in threat intelligence, threat actor tracking, malware analysis, and Advanced Persistent Threats (APTs).
Experience with digital forensic techniques, log analysis, and network traffic analysis.
Demonstrated ability to lead and motivate technical teams, build cohesion, and foster a strong security culture.
Capability to work effectively with diverse technical and business teams, translating technical issues into business context.
Strong written and verbal communication skills; ability to present technical findings to both technical and executive audiences.
Proven trustworthiness and history of acting with integrity, taking pride in work, seeking to excel, being curious and adaptable, and communicating well.
Results-oriented with strong problem-solving and decision-making skills in high-pressure environments.
Self-starter requiring minimal supervision; capable of working independently and collaboratively as needed.
Bachelor's degree in computer science, information assurance, MIS, or related field, or equivalent professional experience.
Preferable, but not required: SANS GIAC certification, CISSP or equivalent.

Benefits

Comp & perks

Annual performance bonus
Long term incentive (equity/stock)
401(k) with employer match
Medical, dental, and vision insurance
PTO, company holidays, and parental leave
Paid Time Off/Paid Sick Leave: Applicants can expect to accrue 15 days of paid time off during their first year (4.62 hours for every 80 hours worked) and increased accruals after five years of service.
Paid training and certifications
Legal assistance and identity protection
Pet insurance
Employee assistance program (EAP)