SalariesSign in
AboutPrivacyTerms
US LBM Engineer - Cybersecurity Operations
US LBM

US LBM Engineer - Cybersecurity Operations

United StatesRemoteFull-time
Pay Range: $100k - $120k / annual
Posted 11 days ago · Oct 7
Apply

Job Description

US LBM is one of the leading and fastest growing distributors of specialty building materials in the United States, with a team of over 13,000 employees located throughout the country. Since our founding in 2009, we have acquired over 100 companies and have expanded to more than 450 locations serving 37 states. US LBM is a progressive organization that promotes a unique culture that focuses on the value of its customers and associates. Developing our people is critical to our strategy and fostering our culture of empowerment.

.

A Brief Overview
The US LBM Engineer - Cybersecurity Operations is a hands-on technical role responsible for monitoring, detecting, investigating, and responding to cyber threats across US LBM's Microsoft security environment. This position supports Microsoft Sentinel, Microsoft Defender XDR, Attack Surface Reduction (ASR), threat hunting, incident response, automation, and security for Microsoft 365 Copilot and AI technologies.

Pay Rate: $100K - $120K annual salary

What you will do

  • Monitor, investigate, and respond to cybersecurity alerts, incidents, and threats across enterprise and cloud environments.
  • Administer and optimize Microsoft Sentinel, including log collections, integrations, connectors, analytics rules, watchlists, threat intelligence integrations, and dashboards.
  • Working with the Cyber Solutions team, support and maintain Microsoft Defender XDR, Defender for Endpoint, Defender for Identity, Defender for Office 365, Defender for Cloud Apps, and Defender for Cloud.
  • Develop and tune detections, alerts, and KQL queries to improve visibility and reduce false positives.
  • Perform threat hunting and security investigations using Defender XDR and Sentinel.
  • Coach and mentor junior cybersecurity analysts by providing guidance on investigations, threat hunting, detection engineering, Microsoft security technologies, and incident response best practices.
  • Implement and maintain automation using Sentinel Automation Rules and Logic Apps.
  • Manage, monitor, and maintain health of Microsoft Defender for Endpoint, and cyber related agents Support and collaborate in the establishment and maintenance of server and workstation security baselines, including QA check on server builds.
  • Optimize Microsoft Defender for Endpoint security controls, including Attack Surface Reduction (ASR) rules and endpoint hardening.
  • Support security controls, governance, and monitoring for Microsoft 365 Copilot and AI-enabled technologies.
  • Coordinate penetration testing engagements and track remediation activities.
  • Support purple team exercises and validate the effectiveness of security detections and response capabilities.
  • Collaborate with infrastructure, cloud, identity, and application teams to improve security posture.
  • Develop and maintain operational procedures, runbooks, and technical documentation.

Required For All Jobs

  • Perform other duties as assigned.
  • Comply with all policies and standards.
  • Adhere to Company’s commitment to workplace safety.
  • Participate in and complete assigned trainings.

Education Qualifications

  • Bachelor's Degree in Cybersecurity, Information Technology, Computer Science, or a related field.

Experience Qualifications

  • 3+ years of experience in cybersecurity operations, security engineering, or incident response.
  • Hands-on experience with Microsoft Defender XDR technologies.
  • Experience with Microsoft Sentinel.
  • Experience investigating security incidents involving endpoints, identities, phishing, malware, and cloud services.
  • Experience writing KQL queries for threat hunting, investigations, and detection engineering.
  • Experience implementing and managing Microsoft Attack Surface Reduction (ASR) rules.

Skills and Abilities

  • Strong understanding of security operations, threat hunting, detection engineering, and incident response.
  • Working knowledge of Windows, Active Directory, Microsoft Entra ID, networking, and cloud security.
  • Strong analytical and problem-solving skills.
  • Experience with Microsoft Azure Cloud environment and typical hybrid environment preferred.
  • Experience with Microsoft Intune preferred.
  • Experiencing implementing automated desired state configuration, server baselines, and CIS benchmarking preferred.
  • Experience with Tenable products or other vulnerability management solutions preferred.
  • Experience with purple team exercises and security control validation preferred.

Licenses and Certifications

  • SC-200, AZ-500, Security+, CISSP, or similar certifications preferred.

Travel Requirements

  • 10% Travel.

.

Click Here for Information Regarding Our Benefits


US LBM Holdings, LLC, is an equal-opportunity employer. We do not discriminate on the basis of race, color, religion, creed, national origin or ancestry, sex, age, physical or mental disability, veteran or military status, genetic information, sexual orientation, gender identity, marital status, military status, order of protection status, or any other legally recognized protected basis under federal, state, or local law.

Originally posted on Himalayas

View job

Cybersecurity Co-Founder / Head of Growth (100 % remote) (m/f/d)

EWOR GmbH

  • Worldwide
  • Remote
  • Full-time
Apply
16 hrs ago
View job

Cyber Services Manager - Cyber Risk Consulting

Beazley Security

  • Switzerland
  • Remote
  • Full-time
Apply
17 hrs ago
View job

Senior Threat Intelligence Analyst

Team Cymru

  • United States
  • Remote
  • Full-time
Apply
18 hrs ago
View job

AWS DevSecOps Engineer

T-Rex Solutions, LLC

  • United States
  • Remote
  • Full-time
Apply
19 hrs ago
View job

Information Security Engineer

Dentons

  • Spain
  • Remote
  • Full-time
Apply
20 hrs ago
View job

Incident Response Engineer

Snowflake

  • United States
  • Remote
  • Full-time
Apply
21 hrs ago
View job

Staff Application Security Engineer

Fingerprint

  • United States
  • Remote
  • Full-time
Apply
21 hrs ago
View job

Senior GRC Analyst

Tines

  • United States
  • Remote
  • Full-time
Apply
21 hrs ago
View job

Application Cybersecurity Specialist

Eurofins

  • Poland
  • Remote
  • Full-time
Apply
22 hrs ago
View job

Application Security Consultant

Bright Vision Technologies

  • United States
  • Remote
  • Full-time
Apply
22 hrs ago
View job

Cybersecurity, Risk & Digital Trust - Summer 2027 Internship Pathway

Lumen Technologies

  • United States
  • Remote
  • Internship
Apply
22 hrs ago
View job
N

Security Engineer

Nucleus Financial

  • United Kingdom
  • Remote
  • Full-time
Apply
22 hrs ago
View job

AI Risk Engineer

Bright Vision Technologies

  • United States
  • Remote
  • Full-time
Apply
23 hrs ago
View job

Oracle Security Engineer

Bright Vision Technologies

  • United States
  • Remote
  • Full-time
Apply
23 hrs ago
View job

Security Cross functional Success Architect

ServiceNow

  • United States
  • Remote
  • Full-time
Apply
23 hrs ago
View job

Senior Privacy Counsel (m/f/d)

Deep Blue Recruitment

  • Germany
  • Remote
  • Full-time
Apply
23 hrs ago
View job

Risk Analyst

Pavago

  • Colombia
  • Remote
  • Full-time
Apply
1 day ago
View job

Cyber Security Analyst

10 Percent Recruiting

  • United States
  • Remote
  • Full-time
Apply
1 day ago
View job

Senior IAM Technical Lead (Full remote)

knowmad mood

  • Spain
  • Remote
  • Full-time
Apply
1 day ago
View job
N

Application Security Architect

NinjaOne

  • Brazil
  • Remote
  • Contract
Apply
1 day ago
View job
F

Senior Cybersecurity Engineer (Infrastructure)

FYUL

  • Estonia
  • Remote
  • Full-time
Apply
1 day ago
View job

Software Security Engineer

Bright Vision Technologies

  • United States
  • Remote
  • Full-time
Apply
1 day ago
View job

Project Lead: Security Technology & Risk Intelligence Implementation (Minneapoli

Wipro Limited

  • United States
  • Remote
  • Full-time
Apply
1 day ago
View job
A

Compliance Analyst

Applied Digital

  • United States
  • Remote
  • Full-time
Apply
1 day ago
View job

Sr. Cyber Security Analyst

10 Percent Recruiting

  • United States
  • Remote
  • Full-time
Apply
1 day ago
View job

Application Security Consultant*

inovex GmbH

  • Germany
  • Remote
  • Full-time
Apply
1 day ago
View job

Senior/Lead Security Engineer (Detection & Response)

Fuse Energy

  • Poland
  • Remote
  • Full-time
Apply
1 day ago
View job

Staff GRC Analyst

Tines

  • United States
  • Remote
  • Full-time
Apply
1 day ago
View job
#

Analista Blue Team - SOC (Madrugada)

#VEMPRAIT4US

  • Brazil
  • Remote
  • Contract
Apply
1 day ago
View job

Information Security Analyst (Remote in the UK)

KnowBe4

  • United Kingdom
  • Remote
  • Full-time
Apply
1 day ago
Page 1 of 126Next
US LBM

US LBM Engineer - Cybersecurity Operations

United StatesRemoteFull-time
Pay Range: $100k - $120k / annual
Posted 11 days ago · Oct 7
Apply

Job Description

US LBM is one of the leading and fastest growing distributors of specialty building materials in the United States, with a team of over 13,000 employees located throughout the country. Since our founding in 2009, we have acquired over 100 companies and have expanded to more than 450 locations serving 37 states. US LBM is a progressive organization that promotes a unique culture that focuses on the value of its customers and associates. Developing our people is critical to our strategy and fostering our culture of empowerment.

.

A Brief Overview
The US LBM Engineer - Cybersecurity Operations is a hands-on technical role responsible for monitoring, detecting, investigating, and responding to cyber threats across US LBM's Microsoft security environment. This position supports Microsoft Sentinel, Microsoft Defender XDR, Attack Surface Reduction (ASR), threat hunting, incident response, automation, and security for Microsoft 365 Copilot and AI technologies.

Pay Rate: $100K - $120K annual salary

What you will do

  • Monitor, investigate, and respond to cybersecurity alerts, incidents, and threats across enterprise and cloud environments.
  • Administer and optimize Microsoft Sentinel, including log collections, integrations, connectors, analytics rules, watchlists, threat intelligence integrations, and dashboards.
  • Working with the Cyber Solutions team, support and maintain Microsoft Defender XDR, Defender for Endpoint, Defender for Identity, Defender for Office 365, Defender for Cloud Apps, and Defender for Cloud.
  • Develop and tune detections, alerts, and KQL queries to improve visibility and reduce false positives.
  • Perform threat hunting and security investigations using Defender XDR and Sentinel.
  • Coach and mentor junior cybersecurity analysts by providing guidance on investigations, threat hunting, detection engineering, Microsoft security technologies, and incident response best practices.
  • Implement and maintain automation using Sentinel Automation Rules and Logic Apps.
  • Manage, monitor, and maintain health of Microsoft Defender for Endpoint, and cyber related agents Support and collaborate in the establishment and maintenance of server and workstation security baselines, including QA check on server builds.
  • Optimize Microsoft Defender for Endpoint security controls, including Attack Surface Reduction (ASR) rules and endpoint hardening.
  • Support security controls, governance, and monitoring for Microsoft 365 Copilot and AI-enabled technologies.
  • Coordinate penetration testing engagements and track remediation activities.
  • Support purple team exercises and validate the effectiveness of security detections and response capabilities.
  • Collaborate with infrastructure, cloud, identity, and application teams to improve security posture.
  • Develop and maintain operational procedures, runbooks, and technical documentation.

Required For All Jobs

  • Perform other duties as assigned.
  • Comply with all policies and standards.
  • Adhere to Company’s commitment to workplace safety.
  • Participate in and complete assigned trainings.

Education Qualifications

  • Bachelor's Degree in Cybersecurity, Information Technology, Computer Science, or a related field.

Experience Qualifications

  • 3+ years of experience in cybersecurity operations, security engineering, or incident response.
  • Hands-on experience with Microsoft Defender XDR technologies.
  • Experience with Microsoft Sentinel.
  • Experience investigating security incidents involving endpoints, identities, phishing, malware, and cloud services.
  • Experience writing KQL queries for threat hunting, investigations, and detection engineering.
  • Experience implementing and managing Microsoft Attack Surface Reduction (ASR) rules.

Skills and Abilities

  • Strong understanding of security operations, threat hunting, detection engineering, and incident response.
  • Working knowledge of Windows, Active Directory, Microsoft Entra ID, networking, and cloud security.
  • Strong analytical and problem-solving skills.
  • Experience with Microsoft Azure Cloud environment and typical hybrid environment preferred.
  • Experience with Microsoft Intune preferred.
  • Experiencing implementing automated desired state configuration, server baselines, and CIS benchmarking preferred.
  • Experience with Tenable products or other vulnerability management solutions preferred.
  • Experience with purple team exercises and security control validation preferred.

Licenses and Certifications

  • SC-200, AZ-500, Security+, CISSP, or similar certifications preferred.

Travel Requirements

  • 10% Travel.

.

Click Here for Information Regarding Our Benefits


US LBM Holdings, LLC, is an equal-opportunity employer. We do not discriminate on the basis of race, color, religion, creed, national origin or ancestry, sex, age, physical or mental disability, veteran or military status, genetic information, sexual orientation, gender identity, marital status, military status, order of protection status, or any other legally recognized protected basis under federal, state, or local law.

Originally posted on Himalayas