Sr. Specialist, Cybersecurity Engineering

McKesson•Richmond, VA

26d

About The Position

The Cybersecurity Engineering role provides technical leadership in designing, implementing, and optimizing advanced security solutions across McKesson’s cloud, on-premises, and OT environments. The position integrates security requirements into system, software, and infrastructure designs to meet regulatory expectations and strengthen enterprise resilience. It leads security control implementation and monitoring, proactive risk mitigation, and operational transparency, and contributes to security architecture decisions, remediation strategies, and major incident investigations. The role helps shape future security capabilities by partnering with cross-functional teams, evaluating emerging technologies, and developing security standards and guidelines. It provides subject matter expertise, influences strategic direction, and mentors junior team members. The position also contributes architectural input to business continuity and disaster recovery planning.

Requirements

Bachelor’s degree or equivalent combination of education and experience.
Typically 7 or more years of progressive experience in cybersecurity engineering, architecture, or infrastructure security roles.
Deep knowledge of IT and cybersecurity concepts, with the ability to influence architectural decisions and align solutions with business needs.
Experience leading incident response, performing complex assessments, evaluating new technologies, and partnering with vendors on advanced security solutions.
Proficiency in Cloud Security, Communications Security, Cryptography, and Cyber Resiliency principles.
Ability to lead incident response, coordinate containment, and prepare structured reports.
Ability to engineer threat visibility through network sensor tuning, log and telemetry enablement, and event correlation.
Proficiency in threat-informed investigations, including behavioral and malicious activity analysis and processing digital evidence.
Ability to identify systems designed without security considerations and drive remediation with owners.
Proficiency in platform lifecycle hygiene, including installing system and component upgrades and developing durable rollback strategies.
Proficiency in pipeline hardening using DevSecOps practices and writing code in a currently supported programming language for automation, checks, and integrations.
Ability to troubleshoot cyber defense infrastructure anomalies and system performance issues in complex production environments.
Proficiency in identity and cryptography engineering, including implementing user credential management and enterprise key escrow systems.
Ability to communicate clearly through briefings and actionable technical runbooks for operations teams.

Responsibilities

Lead the design and implementation of advanced security solutions and architectures aligned with enterprise strategy and regulatory requirements.
Perform complex security assessments, including penetration testing and risk analysis, and evaluate emerging threats to guide decision-making.
Lead incident response and forensic investigations for major security incidents, determine root causes, and drive remediation plans.
Develop and maintain advanced security documentation, standards, and guidelines.
Identify security architecture and control gaps, recommend solutions, and influence implementation approaches.
Collaborate with cross-functional teams to embed security requirements early in secure system and software development.
Evaluate emerging security technologies, tools, and industry trends to inform strategic planning and future capability development.
Work with vendors to assess, design, and implement advanced security products and managed services.
Provide technical leadership, mentor junior and mid-level engineering team members, and help build a high-performing security engineering practice.
Contribute architectural input to business continuity and disaster recovery planning and validate system readiness.