Lead, Vulnerability Management & Remediation

Mckesson Corporation; Richmond (VA); On-site; USD 123,000 - 204,000; Full time

Job summary

McKesson is seeking a Senior Cybersecurity Vulnerability Management Analyst to lead the vulnerability program and collaborate with security operations, infrastructure, cloud, and engineering teams to identify, prioritize, and remediate weaknesses across the enterprise.

Requirements include 6+ years in cybersecurity or IT operations and hands-on experience with vulnerability platforms such as Tenable, Qualys, and Rapid7. McKesson offers a strong base pay range and comprehensive rewards.

Qualifications

• Degree or equivalent and typically requires 4+ years of relevant experience.

Responsibilities

• Implement and maintain vulnerability management processes and technologies across enterprise assets.
• Operate and support vulnerability scanning platforms, onboard assets, validate results, and monitor health.
• Analyze findings to determine risk, exploitability, and remediation priority.
• Communicate risks and drive remediation with infrastructure, cloud, app, and business teams.
• Validate vulnerabilities and distinguish true positives from false positives.

Skills

Vulnerability management

Cybersecurity

Threat management

Scripting (Python)

Cloud security

Stakeholder communication

Education

Bachelor's degree in computer science or information security

Tools

Tenable

Qualys

Rapid7

Microsoft Defender Vulnerability Management

AWS/Azure/GCP

Job description

McKesson is seeking a Senior Cybersecurity Vulnerability Management Analyst to lead the vulnerability program and collaborate with security operations, infrastructure, cloud, and engineering teams to identify, prioritize, and remediate weaknesses across the enterprise.

Requirements include 6+ years in cybersecurity or IT operations and hands-on experience with vulnerability platforms such as Tenable, Qualys, and Rapid7. McKesson offers a strong base pay range and comprehensive rewards.