Senior Cyber Threat Detection and Response Analyst

Mckesson Corporation; Richmond (VA); On-site; USD 115,000 - 155,000; Full time

Job summary

McKesson is seeking a Senior Cybersecurity Threat Detection & Response Analyst to design and support detection engineering and response enablement solutions. You will onboard logs, tune detections, support alert triage, and maintain detection platforms such as SIEM, EDR/XDR, and SOAR.

You will document use cases, runbooks, and changes while escalating risks when needed. The role requires planning, collaboration with SOC/CSIRT, and staying current on threat trends to map detections to MITRE

Qualifications

• Bachelor’s degree or equivalent and 4+ years of relevant experience.
• Experience with security monitoring, detection engineering, incident response, or SOC-supporting engineering.
• Experience with SIEM/EDR/IDS/IPS, log collection, parsing, and data validation.

Responsibilities

• Implement and maintain log/telemetry collection for security monitoring across endpoints, networks, cloud, identities, and apps.
• Onboard data sources to SIEM and related platforms; validate parsing and normalization; monitor data integrity and platform health.
• Create and tune detection rules and alerts to improve fidelity and reduce noise; document logic and outcomes.

Skills

Cybersecurity

Threat detection

Incident response

SOC coordination

Log analysis

Collaboration

Threat research

Cloud logging

Education

Bachelor’s degree in computer science or related field

Tools

SIEM

EDR/XDR

SOAR

IDS/IPS

Cloud platforms (AWS/Azure/GCP)

Job description

McKesson is seeking a Senior Cybersecurity Threat Detection & Response Analyst to design and support detection engineering and response enablement solutions. You will onboard logs, tune detections, support alert triage, and maintain detection platforms such as SIEM, EDR/XDR, and SOAR.

You will document use cases, runbooks, and changes while escalating risks when needed. The role requires planning, collaboration with SOC/CSIRT, and staying current on threat trends to map detections to MITRE