Senior Cybersecurity Analyst - Incident Response & Threat Hunting

Mckesson Corporation; United States; On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Total Rewards

Job summary

McKesson Corporation is seeking a Senior Cybersecurity Analyst to strengthen enterprise security monitoring and incident response capabilities. You will monitor and investigate security activity, and serve as a senior escalation point for complex events, determining when an event should be managed as a cybersecurity incident.

You will work with technical and business partners through investigation, containment, eradication, and recovery, improving detection logic, response playbooks, and

Qualifications

• 6+ years of professional cybersecurity experience across security operations, threat detection, or incident response.
• Proficient with SIEM/EDR technologies and security monitoring processes.
• Familiar with MITRE ATT&CK and NIST incident-response lifecycle.

Responsibilities

• Monitor, detect, analyze, and triage security alerts and events across enterprise environments.
• Serve as a senior escalation point for security events and help determine when a cybersecurity incident should be declared.
• Support incident investigation, containment, eradication, recovery, root-cause analysis, and post-incident reporting.
• Identify attacker tools, tactics, and procedures using threat intelligence and MITRE ATT&CK.
• Improve SIEM/EDR detections, investigations, playbooks, and incident-response processes.
• Conduct proactive threat-hunting and security analysis activities.
• Contribute to post-incident reviews, security metrics, and continuous improvement.

Skills

SIEM

EDR

Threat detection

Incident response

MITRE ATT&CK

NIST framework

Security analytics

Communication to stakeholders

Education

SANS GCIH

GCIA

CompTIA CySA+

Tools

SIEM

EDR

Job description

McKesson Corporation is seeking a Senior Cybersecurity Analyst to strengthen enterprise security monitoring and incident response capabilities. You will monitor and investigate security activity, and serve as a senior escalation point for complex events, determining when an event should be managed as a cybersecurity incident.

You will work with technical and business partners through investigation, containment, eradication, and recovery, improving detection logic, response playbooks, and