Senior Vulnerability Management Lead

McKesson; Richmond (VA); On-site; USD 123,000 - 204,000; Full time

Job summary

McKesson is seeking a Senior Cybersecurity Vulnerability Management Analyst to implement and maintain vulnerability management processes across the enterprise. You will partner with infrastructure, cloud, and business teams to analyze findings, validate vulnerabilities, and drive prioritized remediation.

You will stay current on emerging threats and collaborate with security operations and engineering to strengthen defenses, contributing to executive reporting and risk-based decision making.

Qualifications

• Bachelor’s degree in computer science, information security/assurance, MIS, engineering, or related field.
• 4+ years of relevant vulnerability management or security operations experience.
• Experience with vulnerability management platforms and risk-based remediation.

Responsibilities

• Implement and maintain vulnerability management processes and technologies across enterprise assets.
• Operate vulnerability scanning platforms, onboarding assets and validating results.
• Analyze findings to determine risk, impact, and remediation priority.
• Collaborate with infra, cloud, application, and business teams to drive remediation.
• Perform vulnerability validation to distinguish true/false positives.
• Support risk-based prioritization by identifying actively exploited vulnerabilities.
• Assist with reporting, dashboards, and executive communications.
• Stay current on threats, vulnerabilities, and exploitation trends.
• Collaborate with security teams to identify systemic weaknesses.

Skills

Vulnerability management

Threat analysis

Communication with stakeholders

Cloud security

Scripting (Python/PowerShell/Bash)

Operating systems & networks

Window/Linux administration

CVSS/EPSS/NIST/CIS

Ticketing/workflows

Education

Bachelor’s degree in CS/Information Security/Engineering

Tools

Tenable

Qualys

Rapid7

Wiz

Microsoft Defender Vulnerability Management

Job description

McKesson is seeking a Senior Cybersecurity Vulnerability Management Analyst to implement and maintain vulnerability management processes across the enterprise. You will partner with infrastructure, cloud, and business teams to analyze findings, validate vulnerabilities, and drive prioritized remediation.

You will stay current on emerging threats and collaborate with security operations and engineering to strengthen defenses, contributing to executive reporting and risk-based decision making.