Cyber Threat Detection & Response Specialist

McKesson; Richmond (VA); On-site; USD 99,000 - 165,000; Full time

Benefits offered by this job

Competitive compensation

Total Rewards

Equal Opportunity Employer

Job summary

McKesson is seeking a Cyber Threat Detection & Response Analyst in Richmond, VA to join our security operations team. You will implement and support detection engineering, onboard logs, tune rules, and assist with incident response, working with SOC/CSIRT to protect critical assets.

This role requires 4+ years in cybersecurity, experience with SIEM/EDR/XDR, log collection, and runbooks. You will collaborate with infrastructure and application teams, stay current on threats, and help automate

Qualifications

• 4+ years in cybersecurity or IT operations with exposure to security monitoring or detection engineering.
• Experience supporting or implementing SIEM, EDR, IDS/IPS, or logging collectors; validate data collection and alert behavior.
• Ability to follow change management processes, document work, and meet SLA expectations.

Responsibilities

• Implement and maintain log/telemetry collection for security monitoring across endpoints, networks, cloud, and identities.
• Onboard data sources, validate parsing, maintain data integrity, and monitor platform health for SIEM/EDR/XDR.
• Create, implement, and tune detection rules and alerts to improve fidelity and reduce noise; document logic and outcomes.
• Assist with incident response by collecting logs, containing and eradicating threats, and coordinating fixes.
• Develop and execute test plans for detections and response workflows; identify gaps and improvements.
• Collaborate with security operations, infrastructure, and application teams to resolve telemetry issues and improve logging configurations.

Skills

SIEM/EDR/XDR

Log collection

Automation

Incident response

Cloud logs

Collaboration

Threat concepts

Scripting basics

Documentation

On-call support

Education

Bachelor’s degree in CS/InfoSec

Tools

SOAR

Job description

McKesson is seeking a Cyber Threat Detection & Response Analyst in Richmond, VA to join our security operations team. You will implement and support detection engineering, onboard logs, tune rules, and assist with incident response, working with SOC/CSIRT to protect critical assets.

This role requires 4+ years in cybersecurity, experience with SIEM/EDR/XDR, log collection, and runbooks. You will collaborate with infrastructure and application teams, stay current on threats, and help automate