Lead Cybersecurity Operations & Incident Response

QXO, Inc; Charlotte (NC); On-site; USD 140,000 - 211,000; Full time

Benefits offered by this job

Annual bonus

Equity / long-term incentive

401(k) with employer match

Health, dental, vision insurance

Paid time off and holidays

Parental leave

Professional training and certs

Legal protection

Pet insurance

Job summary

QXO is seeking a Senior Manager, Cybersecurity Operations to lead the Security Operations team, driving detection, response, and threat intelligence across the company. You will coordinate incident response, oversee MDR/SIEM/EDR services, and guide capability maturation with a people-first leadership approach.

You will partner with IT, legal, and risk teams to translate technical risks into business context and to improve security posture across QXO’s global operations.

Qualifications

• 7+ years in cybersecurity across detection, incident response, threat intelligence and security operations.
• 3+ years in a leadership or senior IC role leading security operations teams.
• Hands-on SOC operations with SIEM, EDR and security monitoring.
• Expert-level incident response methodologies and intelligence-driven practices.
• Strong threat intelligence, malware analysis and APT experience.
• Experience with forensic techniques, log and network traffic analysis.
• Proven ability to lead, motivate teams and communicate with executives.

Responsibilities

• Lead and manage the Security Operations team, directing daily operations, alert triage and incident response.
• Coordinate incident response end-to-end including containment and post-incident analysis.
• Oversee managed security services to align with security objectives.
• Own detection engineering and threat hunting to elevate threats and anomalies.
• Develop cybersecurity analysts through leadership, career growth, and retention.
• Build threat intelligence programs tracking actors, TTPs, and trends.
• Maintain playbooks, runbooks, and standard work for consistent responses.
• Prepare detailed incident reports and root-cause analyses for improvements.
• Develop the detection and response roadmap and guide maturation efforts.
• Collaborate with infrastructure, app security and IT to validate controls.
• Report security metrics and KRIs to leadership, translating findings to business terms.
• Support security awareness and training across the organization.

Skills

SOC operations

SIEM platforms

EDR tools

incident response

threat intelligence

Cyber Kill Chain

threat actor tracking

forensics

log analysis

network traffic analysis

leadership

business context translation

communication skills

Education

Bachelor's degree in CS/IS/MIS or related field

GIAC/CISSP certification (preferred)

Tools

SIEM

EDR

Job description

QXO is seeking a Senior Manager, Cybersecurity Operations to lead the Security Operations team, driving detection, response, and threat intelligence across the company. You will coordinate incident response, oversee MDR/SIEM/EDR services, and guide capability maturation with a people-first leadership approach.

You will partner with IT, legal, and risk teams to translate technical risks into business context and to improve security posture across QXO’s global operations.