Senior Associate, Information Security Analyst

McKesson•Irving, TX

About The Position

McKesson is seeking a Cybersecurity Analyst to help protect enterprise systems, data, and business operations through proactive monitoring, threat analysis, vulnerability management, and risk reduction activities. In this role, you will analyze security events, support incident investigations, conduct security assessments, and collaborate with technical and business teams to strengthen cybersecurity controls across a complex healthcare environment. This position is ideal for a cybersecurity professional with foundational security experience who is looking to expand technical expertise, contribute to enterprise security initiatives, and drive continuous improvement across security operations.

Requirements

2+ years of cybersecurity, information security, security operations, or related IT experience.
Bachelor's degree or equivalent combination of education and experience.
Basic understanding of cybersecurity threats, vulnerabilities, attack techniques, and risk management principles.
Experience monitoring security events, investigating alerts, or supporting incident response activities.
Proficiency in scripting using Python, Bash, JavaScript, or similar languages for automation and analysis.
Foundational knowledge of networking concepts, including TCP/IP, DNS, routing, firewalls, and network protocols.
Experience using security tools such as SIEM, endpoint security, vulnerability management, or log analysis platforms.
Strong written and verbal communication skills with the ability to document findings and recommendations.

Nice To Haves

Experience supporting a Security Operations Center (SOC) environment.
Familiarity with compliance frameworks, security audits, and regulated industries.
Exposure to cloud security technologies and concepts.
Knowledge of threat intelligence and threat hunting methodologies.
Understanding of identity and access management (IAM) principles.
Experience with security automation, orchestration, or workflow optimization.
Professional certifications such as Security+, CySA+, GSEC, or equivalent.
Experience collaborating across multiple technical teams and driving remediation efforts.

Responsibilities

Monitor, investigate, and analyze security alerts, events, and indicators of compromise.
Support incident response activities, including evidence collection, documentation, and root cause analysis.
Conduct vulnerability assessments and partner with stakeholders to validate remediation efforts.
Research emerging cybersecurity threats, vulnerabilities, and attack techniques.
Develop and maintain security automation scripts using Python, Bash, or JavaScript.
Perform security audits, control testing, and risk assessments aligned with regulatory requirements.
Collaborate with engineering, infrastructure, and business teams to strengthen security controls.
Create reports and deliver findings to technical and non-technical stakeholders.