Sr. Manager Detection Engineering

McKesson

114d • $127,000 - $211,600 • Remote

About The Position

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care. What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow's health today, we want to hear from you. McKesson's looking for a strategic and hands-on Sr. Manager of Detection Engineering & Threat Hunting to lead a dynamic team of eight responsible for building detection content, enabling integration, automation, enrichment, and performance of alerts. This role is pivotal in strengthening our threat visibility, reducing dwell time, and enhancing our overall security posture through collaboration with SOC, Incident Response, and Threat Intelligence teams.

Requirements

• Bachelor's degree or equivalent experience in Cybersecurity, Computer Science, Information Technology, or a related field.
• Typically requires 10+ years of relevant experience in security operations, detection engineering, or threat hunting, including at least 2 years in a leadership or technical lead role.
• 7+ years in security operations, detection engineering, or threat hunting.
• 2+ years in a leadership or technical lead role.
• Strong understanding of attacker behavior, threat actor tactics.
• Hands-on experience with EDR, SIEM (e.g., Splunk, XSIAM, Elastic), and cloud-native logging platforms.
• Proficiency in scripting (Python, PowerShell, etc.) for automation and detection logic.
• Demonstrated success in conducting threat hunts and identifying incidents.
• Ability to explain coverage in an existing framework (E.G. MITRE ATT&CK, Kill chain).
• Excellent communication, leadership, and stakeholder engagement skills.

Nice To Haves

• Experience managing hybrid or globally distributed teams.
• Relevant certifications (e.g., GCFA, GCTI, GMON, GCED, OSCP).
• Cloud security expertise (AWS, Azure, GCP), including logging and monitoring best practices.
• Familiarity with SOAR platforms and automation strategies.

Responsibilities

• Mentor and manage a team of eight detection engineers and threat hunters, fostering a culture of innovation, accountability, and continuous improvement.
• Manage team performance, hiring, workload distribution, and professional development.
• Create new rules, tune existing rules, and delete decayed rules logic using telemetry from EDR, SIEM, Cloud, Network, and Identity platforms.
• Identify logging gaps to enable engineering teams to create more visibility, efficiency, and efficacy in our signals to optimize the success of our rules.
• Implement and maintain CI/CD pipelines for detection logic with robust testing and tuning practice to ensure consistency and version control.
• Align detection practices and CI/CD pipelines to enable SOC playbooks and automation to enable speed and repeatable actions.
• Lead hypothesis-driven hunts using threat intelligence, behavioral anomalies, and emerging TTPs.
• Partner with Threat Intelligence, Incident Response, and Red Team to develop timely and relevant use-cases for purple teaming exercises.
• Continuously improve detection coverage mapping using MITRE ATT&CK and Kill Chain and other industry frameworks to enable to the team story to the Board.
• Balance measuring detection operations, hunts, and projects with KPIs and milestones to measure and communicate maturity and impact.

Benefits

• Competitive compensation package including base pay and potential annual bonus or long-term incentive opportunities.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Industry: Merchant Wholesalers, Nondurable Goods
• Education Level: Bachelor's degree