Senior DevSecOps Lead - Secure by Design in Cloud & CI/CD

Mckesson Corporation; Cork; On-site; EUR 83,000 - 138,000; Full time

Benefits offered by this job

Total Rewards benefits

Job summary

McKesson is seeking a senior cybersecurity engineering leader to drive enterprise security across cloud, on-prem, and hybrid environments. You will design scalable controls for CI/CD pipelines, lead supply‑chain security programs, and mentor engineers to embed secure‑by‑design practices across applications, APIs, containers, and cloud workloads.

The role requires 10+ years in cybersecurity engineering, strong tooling experience, and hands-on cloud and container security.

Qualifications

• 10+ years in cybersecurity engineering or related security roles.
• Bachelor's degree in CS, cybersecurity, or IT (equivalent experience).
• Experience operating enterprise security tools (GitHub Advanced Security, SonarQube, OWASP ZAP).
• Experience with software supply chain security and OSS risk tools (JFrog Xray, Black Duck, Sonatype, FOSSA).
• Proficient in scripting using Python, Bash, or JavaScript.
• Experience designing secure CI/CD pipelines with major platforms.
• Hands-on in cloud security (AWS/Azure/GCP) and container tech (Docker, Kubernetes).
• Experience managing code hosts and developer ecosystems.

Responsibilities

• Lead enterprise security and DevSecOps initiatives across clouds and on‑prem.
• Design scalable security controls in CI/CD and developer platforms.
• Drive adoption of security tools like GitHub Advanced Security, OWASP ZAP, Veracode, SonarQube.
• Lead software supply chain security programs with Xray, Black Duck, Sonatype, FOSSA.
• Develop automation and security integrations using scripting languages.
• Partner with teams to enforce secure‑by‑design for apps, APIs, containers, and cloud workloads.
• Provide leadership during incidents, vulnerability management, and remediation.
• Mentor engineers and shape security architecture and roadmaps.
• Develop security standards for Kubernetes, IaC (Terraform), and cloud apps.
• Build and operate security automation and policy‑as‑code to reduce risk.

Skills

Security leadership

DevSecOps

CI/CD security

Cloud security

Scripting (Python/Bash/JS)

Incident response

Mentoring engineers

Threat modeling

Zero-trust concepts

Policy-as-code

Education

Bachelor's degree in Computer Science or related field

Master's degree (preferred)

Tools

GitHub Advanced Security

SonarQube

OWASP ZAP

JFrog Xray/Curation

Black Duck

Sonatype

FOSSA

Job description

McKesson is seeking a senior cybersecurity engineering leader to drive enterprise security across cloud, on-prem, and hybrid environments. You will design scalable controls for CI/CD pipelines, lead supply‑chain security programs, and mentor engineers to embed secure‑by‑design practices across applications, APIs, containers, and cloud workloads.

The role requires 10+ years in cybersecurity engineering, strong tooling experience, and hands-on cloud and container security.