Senior Cybersecurity Engineering Lead

McKesson; Richmond (VA); On-site; USD 117,000 - 194,000; Full time

Benefits offered by this job

Competitive compensation package

Job summary

McKesson is seeking a seasoned Cybersecurity Engineer to lead the design and implementation of advanced security solutions across cloud, on‑premises, and OT environments. You will drive risk analysis, incident response, and security governance while mentoring junior engineers and shaping enterprise resilience.

The role emphasizes collaboration with cross‑functional teams, embedding security early in system and software design, and staying ahead of emerging threats and technologies to strengthen

Qualifications

• Bachelor’s degree or equivalent combination of education and experience.
• Typically requires 7+ years of progressive experience in cybersecurity engineering, architecture, or infrastructure security roles.
• Deep knowledge of IT and cybersecurity concepts with the ability to influence architectural decisions and align solutions with business needs.
• Experience leading incident response, performing complex assessments, evaluating new technologies, and partnering with vendors on advanced security solutions.
• Proficiency in building resilient platforms across Cloud Security, Communications Security, Cryptography, and Cyber Resiliency principles.
• Proficiency in incident leadership including performing incident responses, coordinating containment, and structured preparing reports.
• Ability to engineer for threat visibility via tuning network sensors, log/telemetry enablement, and robust performing event correlation patterns.
• Proficiency in threat‑informed investigations: performing behavioral analysis, performing malicious activity analysis, and processing digital evidence.
• Ability to identify weaknesses by identifying systems designed without security considerations and driving remediation with owners.
• Proficiency in platform lifecycle hygiene including installing system and component upgrades and durable rollback strategies.
• Proficiency in pipeline hardening using DevSecOps practices and writing code in a currently supported programming language for automation, checks, and integrations.
• Ability to handle complex production realities by troubleshooting cyber defense infrastructure anomalies and troubleshooting system performance.
• Proficiency in identity/crypto engineering including implementing user credential management systems and implementing enterprise key escrow systems.
• Ability to communicate clearly through preparing briefings and actionable technical runbooks for operations teams.

Responsibilities

• Lead the design and implementation of advanced security solutions and architectures, ensuring alignment with enterprise strategy and regulatory requirements.
• Perform complex security assessments, including penetration testing, risk analysis, and evaluation of emerging threats to guide decision‑making.
• Lead incident response and forensic investigations for major security incidents, determining root causes and driving remediation plans.
• Develop and maintain advanced security documentation, standards, and guidelines to promote consistency and operational transparency.
• Drive improvements to security architecture and controls by identifying gaps, recommending solutions, and influencing implementation approaches.
• Collaborate with cross‑functional teams on secure system and software development, ensuring security requirements are embedded early in design.
• Evaluate emerging security technologies, tools, and industry trends to inform strategic planning and future capability development.
• Work with vendors to assess, design, and implement advanced security products and managed services.
• Provide technical leadership, mentor junior and mid‑level engineering team members, and contribute to building a high‑performing security engineering practice.
• Participate in business continuity and disaster recovery planning by offering architectural input and validating system readiness.

Skills

Penetration testing

Risk analysis

Incident leadership

DevSecOps

Threat-informed investigations

Security architecture

Cloud security

Cryptography

Communication

Education

Bachelor’s degree or equivalent

Job description

McKesson is seeking a seasoned Cybersecurity Engineer to lead the design and implementation of advanced security solutions across cloud, on‑premises, and OT environments. You will drive risk analysis, incident response, and security governance while mentoring junior engineers and shaping enterprise resilience.

The role emphasizes collaboration with cross‑functional teams, embedding security early in system and software design, and staying ahead of emerging threats and technologies to strengthen