Senior Cyber Defense & Incident-Response Analyst

Mckesson Corporation; Scottsdale (AZ); On-site; USD 123,000 - 204,000; Full time

Job summary

McKesson is seeking a Senior Cybersecurity Analyst to strengthen enterprise security monitoring and incident response capabilities. You will monitor and investigate security activity, serve as a senior escalation point for complex events, and help determine when an event should be managed as a cybersecurity incident.

You will work with technical and business partners throughout investigation, containment, eradication, and recovery, while improving detection logic, response playbooks, and

Qualifications

• 6+ years of professional cybersecurity experience with security operations, threat detection, or incident response.
• Hands-on experience using SIEM and EDR technologies.
• Familiarity with MITRE ATT&CK framework and NIST incident-response lifecycle.
• One or more relevant cybersecurity certifications, such as SANS GCIH, GCIA, CySA+, or equivalent.
• Proven ability to investigate security events and develop defensible conclusions.
• Strong analytical, problem-solving, documentation, and prioritization skills.
• Ability to communicate findings and actions to technical and non-technical stakeholders.

Responsibilities

• Monitor, detect, analyze, and triage security alerts and events across enterprise environments.
• Serve as a senior escalation point for security events and determine when incidents should be declared.
• Support incident investigation, containment, eradication, recovery, root-cause analysis, and post-incident reporting.
• Identify attacker tools, tactics, and procedures using threat intelligence and MITRE ATT&CK.
• Improve SIEM and EDR detections, investigation playbooks, alert quality, and incident-response processes.
• Conduct or support proactive threat-hunting and security analysis activities.
• Contribute to post-incident reviews, security metrics, and continuous improvement.
• Mentor junior analysts and communicate risks and recommendations to stakeholders.

Skills

Security operations

Threat detection

Incident response

SIEM

EDR

MITRE ATT&CK

Communication to stakeholders

Education

Cybersecurity certifications (SANS GCIH/GCIA, CySA+)

Equivalent credential

Tools

SIEM tools

EDR tools

Job description

McKesson is seeking a Senior Cybersecurity Analyst to strengthen enterprise security monitoring and incident response capabilities. You will monitor and investigate security activity, serve as a senior escalation point for complex events, and help determine when an event should be managed as a cybersecurity incident.

You will work with technical and business partners throughout investigation, containment, eradication, and recovery, while improving detection logic, response playbooks, and