Senior Cybersecurity Analyst

McKesson•Scottsdale, AZ

About The Position

McKesson is seeking a Senior Cybersecurity Analyst to strengthen enterprise security monitoring and incident response capabilities. The analyst monitors and investigates security activity, serves as a senior escalation point for complex events, and helps determine when events should be managed as cybersecurity incidents. The role works with technical and business partners through investigation, containment, eradication, and recovery. The analyst improves detection logic, response playbooks, and operational processes using threat intelligence, investigation findings, and lessons learned. The role also includes proactive threat hunting and security analysis, operational reporting and continuous improvement, and mentoring junior analysts. This position is suited to an experienced security operations professional with hands-on technical knowledge, sound judgment, structured problem-solving skills, and clear stakeholder communication.

Requirements

6 or more years of professional cybersecurity experience, including experience in security operations, threat detection, or incident response.
Hands-on experience using Security Information and Event Management (SIEM) and Endpoint Detection and Response (EDR) technologies.
Working knowledge of the MITRE ATT&CK framework and the NIST incident-response lifecycle.
One or more relevant cybersecurity certifications, such as SANS GCIH, GCIA, CompTIA CySA+, or an equivalent credential.
Ability to investigate security events, analyze incomplete or conflicting data, and develop defensible conclusions.
Strong analytical, problem-solving, documentation, and prioritization skills.
Ability to communicate security findings, risks, and recommended actions to technical and non-technical stakeholders.

Nice To Haves

Experience with digital forensics, threat hunting, malware analysis, or security automation and orchestration.
Familiarity with cloud security, cloud-native security monitoring, and identity and access security.
Experience developing or tuning SIEM correlation rules, EDR detections, alerts, dashboards, or response playbooks.
Knowledge of cyber threat intelligence and common attacker tools, tactics, techniques, and procedures.
Experience working in healthcare, pharmaceutical distribution, supply chain, or software environments.
Familiarity with scripting or automation using Python, PowerShell, APIs, or SOAR technologies.
Ability to rapidly learn, assess, and recommend new cybersecurity tools and technologies.
Experience mentoring analysts or sharing technical knowledge across a security operations team.

Responsibilities

Monitor, detect, analyze, and triage security alerts and events across enterprise environments.
Serve as a senior escalation point for security events and help determine when a cybersecurity incident should be declared.
Support incident investigation, containment, eradication, recovery, root-cause analysis, and post-incident reporting.
Identify common attacker tools, tactics, and procedures using threat intelligence and the MITRE ATT&CK framework.
Improve SIEM and EDR detections, investigation playbooks, alert quality, and incident-response processes.
Conduct or support proactive threat-hunting and security analysis activities.
Contribute to post-incident reviews, operational reporting, security metrics, and continuous-improvement initiatives.
Mentor junior analysts and communicate security risks and recommendations to technical and non-technical stakeholders.