Senior Cyber Threat Detection & Response Specialist

McKesson; Richmond (VA); On-site; USD 123,000 - 204,000; Full time

Job summary

McKesson seeks a Senior Cybersecurity Threat Detection & Response Analyst to implement and support detection engineering and response enablement solutions. You will onboard logs, tune rules, support alert triage and incident response, and maintain health of detection platforms (SIEM, EDR/XDR, SOAR).

The role partners with SOC/CSIRT, follows security policies, documents changes, and leverages research tools to map detections to common tactics.

Qualifications

• Degree or equivalent and typically requires 4+ years of relevant experience.
• Experience with security monitoring, detection engineering, incident response, or SOC-supporting engineering.
• Ability to follow change management processes and document work.
• Willingness to learn threat concepts and internal tooling.

Responsibilities

• Implement and maintain log/telemetry collection for security monitoring across endpoints, networks, cloud, identity, and applications.
• Support SIEM and related detection platforms by onboarding data sources and validating parsing/normalization.
• Create, implement, and tune detection rules and alerts to improve fidelity and reduce noise.
• Assist with alert triage and incident response by collecting logs/evidence and coordinating fixes.
• Develop and test SOAR/playbooks to streamline response tasks with SOC/IR.
• Develop and execute test plans for detections and response workflows.
• Collaborate with security operations, infrastructure, and application teams to resolve telemetry issues.
• Stay current on threats and map detections to MITRE ATT&CK fundamentals.

Skills

Cybersecurity

Communication

Incident response

Threat detection

SLA adherence

On-call support

Education

Bachelor’s degree in computer science or related field

Tools

SIEM

EDR/XDR

IDS/IPS

Logging agents/collectors

Vulnerability scanners

Job description

McKesson seeks a Senior Cybersecurity Threat Detection & Response Analyst to implement and support detection engineering and response enablement solutions. You will onboard logs, tune rules, support alert triage and incident response, and maintain health of detection platforms (SIEM, EDR/XDR, SOAR).

The role partners with SOC/CSIRT, follows security policies, documents changes, and leverages research tools to map detections to common tactics.