Senior Cyber Threat Detection & Response Lead

Mckesson Corporation; Richmond (VA); On-site; USD 123,000 - 204,000; Full time

Job summary

McKesson Corporation is seeking a Senior Cybersecurity Threat Detection & Response Analyst to implement and support detection engineering, incident response, and platform health for SIEM/EDR/XDR. You will onboard data sources, tune rules, and assist with containment while collaborating with SOC/IR teams to strengthen detections and improve coverage.

Ideal candidates have 4+ years in security operations, experience with SIEM/EDR/XDR tooling, and a bachelor’s degree in a related field.

Qualifications

• 4+ years of relevant experience in cybersecurity or IT operations with security monitoring
• Experience with SIEM/EDR/XDR and related tooling; ability to validate data collection and alert behavior
• Follows change management processes and documents work with SLAs
• Willingness to learn threat concepts and internal tooling; participates in training and tabletop exercises
• Knowledge of security monitoring technologies and ticketing workflows
• Experience onboarding log sources and telemetry pipelines with basic parsing/normalization concepts
• Understanding of incident response concepts and telemetry triage
• Strong collaboration and communication skills with diverse teams
• Familiarity with cloud platforms (AWS, Azure, GCP) and cloud logging
• Basic scripting or automation skills (e.g., Python, PowerShell, Bash)
• Understanding of Windows/Linux logging and troubleshooting
• Familiarity with security frameworks (NIST, CIS) and SOP adherence
• Ability to manage multiple tasks and meet SLAs
• Willingness to participate in on-call incident support

Responsibilities

• Implement and maintain log/telemetry collection for security monitoring
• Onboard data sources and maintain data integrity for SIEM/EDR/XDR platforms
• Create and tune detection rules and alerts to improve fidelity and reduce noise
• Assist with incident response and containment efforts
• Develop automation/playbooks (SOAR) and validate changes with SOC/IR
• Develop and execute test plans for detections and responses
• Collaborate with security, infra, and apps teams to resolve telemetry issues
• Stay current on threats using MITRE ATT&CK or similar frameworks
• Perform other duties as assigned
• Document work through use cases, runbooks, and change records

Skills

Security monitoring

Detection engineering

Incident response

SOC-supporting engineering

Cloud platforms

Scripting automation

Communication

On-call readiness

Education

Bachelor’s degree in computer science or related field

Tools

SIEM

EDR/XDR

IDS/IPS

Logging agents/collectors

Vulnerability scanners

Job description

McKesson Corporation is seeking a Senior Cybersecurity Threat Detection & Response Analyst to implement and support detection engineering, incident response, and platform health for SIEM/EDR/XDR. You will onboard data sources, tune rules, and assist with containment while collaborating with SOC/IR teams to strengthen detections and improve coverage.

Ideal candidates have 4+ years in security operations, experience with SIEM/EDR/XDR tooling, and a bachelor’s degree in a related field.