Senior Cybersecurity Analyst

McKesson•Scottsdale, TX

4d•$122,500 - $204,100

About The Position

McKesson is seeking a Senior Cybersecurity Analyst to strengthen enterprise security monitoring and incident-response capabilities. The analyst will monitor and investigate security activity, serve as a senior escalation point for complex events, and help determine when an event should be managed as a cybersecurity incident. The role works with technical and business partners throughout investigation, containment, eradication, and recovery. It also improves detection logic, response playbooks, and operational processes based on threat intelligence, investigation findings, and lessons learned. The position is suited to an experienced security operations professional with hands-on technical knowledge, sound judgment, structured problem-solving, and clear stakeholder communication. The analyst will also mentor junior analysts through knowledge sharing.

Requirements

6 or more years of professional cybersecurity experience, including experience in security operations, threat detection, or incident response.
Hands-on experience using Security Information and Event Management (SIEM) and Endpoint Detection and Response (EDR) technologies.
Working knowledge of the MITRE ATT&CK framework and the NIST incident-response lifecycle.
One or more relevant cybersecurity certifications, such as SANS GCIH, GCIA, CompTIA CySA+, or an equivalent credential.
Ability to investigate security events, analyze incomplete or conflicting data, and develop defensible conclusions.
Strong analytical, problem-solving, documentation, and prioritization skills.
Ability to communicate security findings, risks, and recommended actions to technical and non-technical stakeholders.

Nice To Haves

Experience with digital forensics, threat hunting, malware analysis, or security automation and orchestration.
Familiarity with cloud security, cloud-native security monitoring, and identity and access security.
Experience developing or tuning SIEM correlation rules, EDR detections, alerts, dashboards, or response playbooks.
Knowledge of cyber threat intelligence and common attacker tools, tactics, techniques, and procedures.
Experience working in healthcare, pharmaceutical distribution, supply chain, or software environments.
Familiarity with scripting or automation using Python, PowerShell, APIs, or SOAR technologies.
Ability to rapidly learn, assess, and recommend new cybersecurity tools and technologies.
Experience mentoring analysts or sharing technical knowledge across a security operations team.

Responsibilities

Monitor, detect, analyze, and triage security alerts and events across enterprise environments.
Serve as a senior escalation point for security events and help determine when a cybersecurity incident should be declared.
Support incident investigation, containment, eradication, recovery, root-cause analysis, and post-incident reporting.
Identify common attacker tools, tactics, and procedures using threat intelligence and the MITRE ATT&CK framework.
Improve SIEM and EDR detections, investigation playbooks, alert quality, and incident-response processes.
Conduct or support proactive threat hunting and security analysis activities.
Contribute to post-incident reviews, operational reporting, security metrics, and continuous-improvement initiatives.
Mentor junior analysts and communicate security risks and recommendations to technical and non-technical stakeholders.