Senior Cyber Threat Intelligence Lead — Hybrid/Remote

Mckesson Corporation; Irving (TX); Hybrid; USD 152,000 - 253,000; Full time

Job summary

McKesson is seeking a highly skilled Lead Information Security Analyst to strengthen our cyber threat intelligence capabilities. This senior role identifies, analyzes, and communicates cyber threats across the enterprise and healthcare sector.

As a lead analyst, you will partner with cybersecurity, technology, risk, legal, and business teams to define intelligence needs, assess threats, translate findings into business insights, and guide risk-informed decisions.

Qualifications

• 10+ years of cybersecurity, information security, or related experience.
• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Systems, or related field; equivalent experience will be considered.
• Experience developing a telemetry-to-intelligence model that reduces reliance on third-party feeds and vendors.
• Experience with open source research tools, including VirusTotal, DomainTools, Censys, Grey Noise, and other similar tools.
• Experience in tactical threat intelligence, specifically identifying IOCs, tools, and behavioral fingerprints left by adversaries across telemetry.
• Experience using MITRE ATT&CK, Cyber Kill Chain, or similar frameworks to structure and communicate threat analysis.

Responsibilities

• Identify and track emerging threats by discovering untracked adversary activity, developing new threat clusters into tracked actor groups across McKesson telemetry.
• Deliver time-sensitive behavioral attack chains supporting active incident response and threat hunting operations to drive cross-team detection and protection actions.
• Lead attribution and threat actor analysis by collecting, modeling, attributing, and documenting intelligence gathered during investigations. Serve as the primary owner for attribution efforts while partnering with incident response teams.
• Author actor profiles for the CIRT, Red Team, Threat Hunt, and Detection Engineering, leveraging internal signals, open-source, vendor research, and sharing community reporting.
• Leverage AI to guide investigations and automation (e.g., intel-to-detection pipelines, infrastructure clustering, cross-actor TTP analysis) to scale production beyond manual analysis.
• Provide technical mentorship to mid-level analysts on tradecraft, source evaluation, and production standards.
• Represent the intelligence function in cross-functional planning with SOC, threat hunting, red team, and incident response.
• Contribute to strategic planning on how internal telemetry investments map to intelligence production goals.

Skills

Cybersecurity expertise

Threat intelligence

Mentorship

Cross-functional collaboration

Threat hunting

Education

Bachelor's degree in Cybersecurity/ Information Security/ Computer Science

Tools

MITRE ATT&CK

Threat intelligence platforms

OSINT tools

VirusTotal

Job description

McKesson is seeking a highly skilled Lead Information Security Analyst to strengthen our cyber threat intelligence capabilities. This senior role identifies, analyzes, and communicates cyber threats across the enterprise and healthcare sector.

As a lead analyst, you will partner with cybersecurity, technology, risk, legal, and business teams to define intelligence needs, assess threats, translate findings into business insights, and guide risk-informed decisions.