Senior Engineer, IT - SecOps

Builders FirstSource; Irving (TX); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401(k) retirement plan

PTO

8 paid holidays

Job summary

Builders FirstSource in Irving, Texas seeks a hands-on Security Operations Engineer for a 24x7 SOC role focusing on monitoring, detection, and real-time response to cyber threats. You will work with SIEM/XDR/SOAR, perform triage, containment, and incident handling, and document investigations with a strong engineering mindset.

The role includes security engineering to mature detections, tune tooling, and harden the environment, plus collaboration with IT and business teams.

Qualifications

• 5+ years relevant work experience.
• Clear written and verbal communication, decision-making under pressure.
• Ability to work independently on shift and drive incidents to closure.

Responsibilities

• Monitor SIEM/XDR/SOAR and other telemetry for alerts and IOCs.
• Perform Level 1-2 triage, enrichment, scoping and prioritization of events.
• Lead or support incident investigations and forensics analysis.
• Draft, test and deploy high-fidelity detections and correlation rules.
• Operationalize threat intel into monitoring and detections.
• Maintain shift logs, runbooks and handoffs.

Skills

Written communication

Verbal communication

Independent on shift

Threat hunts

IR investigations

Tools

SIEM/XDR/SOAR

EDR

SentinelOne

Zscaler ZIA

Azure/M365 security tooling

PAM

Job description

We are Builders FirstSource, America's largest supplier of building materials, value‑added components and building services to the professional market. You’ll feel proud of the work you do here every day to transform the future of home building and help make the dream of home ownership more achievable. At BFS, we believe building a successful career is not solely defined by a degree. Your experience, skills and passion are just as important, if not more so.

Purpose

Senior Engineers must be capable of operating without direct oversight. They must also possess a sufficient depth of experience and knowledge in IT and security to be responsible for performing complex engineering tasks, including tool testing, deployment, maintenance, troubleshooting and enhancements. They must support intrusion detection and incident response activities, including threat hunting, leading IR engagements and performing forensics as needed. Strong oral and written communication skills are required, as is the ability to interface with senior personnel across the IT organization and develop detailed process and technical documentation. As a senior member of the SecOps team, Senior Engineers will provide mentorship, support and training to Engineers as needed.

We’re seeking a hands‑on Security Operations Engineer who thrives in a 24x7 environment and can detect, analyze and respond to cyber threats in real time. This role’s primary focus is SOC monitoring and incident response; the secondary focus includes security engineering work to mature detections, tune tooling, automate workflows and harden the environment.

Essential Duties and Responsibilities

Primary – Security Operations (70‑80%)

• Monitor SIEM/XDR/SOAR and other telemetry for alerts, anomalies and indicators of compromise (IOCs).
• Perform Level 1‑2 triage, enrichment, scoping and prioritization of events.
• Execute response playbooks (isolation, containment, account/device quarantine, EDR actions, network blocks).
• Lead or support incident investigations (forensics acquisition, timeline analysis, root cause).
• Document incidents thoroughly (IR tickets, evidence handling, post‑incident reports).
• Conduct proactive hunts using hypotheses tied to current TTPs (e.g., MITRE ATT&CK).
• Draft, test and deploy high‑fidelity detections and correlation rules; reduce alert noise.
• Operationalize threat intel (IOCs, behavioral analytics) into monitoring and detections.
• Track and respond to emerging threats and vulnerabilities impacting our stack.
• Maintain shift logs, knowledge base updates, runbooks and handoffs.

Secondary – Security Engineering (20‑30%)

• Support deployment, configuration and maintenance of SIEM/XDR/SOAR, IDS/IPS, e‑mail security, WAF, CASB, DLP, PAM and endpoint security platforms.
• Build and maintain data sources, parsers/normalization, health checks and content packs.
• Implement security baselines, hardening guides and secure configurations across endpoints, servers, cloud and network devices.
• Integrate cloud telemetry (AWS/GCP/Azure), identity signals (Entra ID/Okta/AD) and SaaS logs into monitoring with robust detections.

Supervisory Responsibilities

This job has no supervisory responsibilities.

Minimum Requirements

• 5+ years relevant work experience.
• Or an equivalent combination of experience and education.
• Clear written and verbal communication, decision‑making under pressure and strong collaboration across IT and business teams.
• Ability to work independently on shift and drive incidents to closure.

Preferred Qualifications

• Certifications: GCIA, GMON, GDAT, CySA+, CASP+, CISSP (or equivalent experience).
• Experience with SentinelOne, Zscaler ZIA, Google SecOps, Azure/M365 security tooling, e‑mail security and PAM.

Competencies

• Detection & Response: Rapid triage, scoping and containment with minimal escalation.
• Analytical Rigor: Able to transform raw telemetry into actionable insights.
• Engineering Mindset: Build/tune detections, automate repetitive work and improve data quality.
• Risk Orientation: Prioritize actions based on business impact and threat likelihood.
• Documentation: Clear tickets, IR timelines and post‑incident reporting.

Work Environment / Physical Activity

• Subject to both typical office environment and outside locations with temperature and weather variations.
• Must be able to lift and carry up to 25 pounds.
• Occasional travel may be required.

Compensation and Benefits

In addition to the base wage listed, this position is also eligible to earn an annual bonus subject to changes in plan design and documents and in accordance with applicable law. Eligibility and the amount of the bonus vary based on overall company success, thresholds met and other terms and conditions of the Company’s active bonus policy for the respective year.

At Builders FirstSource, we offer competitive, affordable benefits designed to make life better for you and the people you love. Our goal is simple – provide great plans that help you and your family to live happier, healthier and more secure lives. This role is eligible for medical, dental, vision and disability insurance plans, 401(k) retirement savings plan, PTO (including paid sick time) and 8 paid holidays per year (for salaried and hourly team members). Details about Builders FirstSource’s benefits offerings are available here www.bldrbenefits.com.

Equal Opportunity/Affirmative Action Employer

Builders FirstSource is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, colour, religion, sex, national origin, protected veteran status or status as an individual with a disability.