Sr. Specialist, Cybersecurity Engineering

McKesson•Richmond, VA

1d•$116,500 - $194,100

About The Position

The Cybersecurity Engineering role provides technical leadership in designing, implementing, and optimizing advanced security solutions across cloud, on-premises, and operational technology environments. It integrates complex security requirements into system, software, and infrastructure design to meet regulatory expectations and strengthen enterprise resilience. The role leads implementation and monitoring of security controls and advances proactive risk mitigation and operational transparency. The position contributes to security architecture decisions, advanced remediation strategies, and major incident investigations. It partners with cross-functional teams, assesses emerging technologies, and develops security standards and guidelines to shape future security capabilities. It also provides subject matter expertise, influences strategic direction, and mentors junior team members. McKesson Medical-Surgical (MMS), the business area described for this role, distributes medical-surgical supplies, pharmaceuticals, diagnostic equipment and supplies, and related solutions to healthcare settings and providers outside traditional hospitals. MMS is expected to become Wellverse in early 2027 and is a subsidiary and publicly reported segment of McKesson Corporation.

Requirements

Bachelor’s degree or equivalent combination of education and experience.
Typically 7 or more years of progressive experience in cybersecurity engineering, architecture, or infrastructure security roles.
Deep knowledge of IT and cybersecurity concepts, with the ability to influence architectural decisions and align solutions with business needs.
Experience leading incident response, performing complex assessments, evaluating new technologies, and partnering with vendors on advanced security solutions.
Proficiency building resilient platforms across cloud security, communications security, cryptography, and cyber resiliency principles.
Proficiency leading incidents, coordinating containment, and preparing structured reports.
Ability to improve threat visibility by tuning network sensors, enabling logs and telemetry, and developing robust event-correlation patterns.
Proficiency in threat-informed investigations, including behavioral and malicious-activity analysis and processing digital evidence.
Ability to identify systems designed without security considerations and drive remediation with owners.
Proficiency in platform lifecycle hygiene, including installing system and component upgrades and planning durable rollback strategies.
Proficiency hardening pipelines using DevSecOps practices and writing code in a currently supported programming language for automation, checks, and integrations.
Ability to troubleshoot cyber defense infrastructure anomalies and system performance issues in complex production environments.
Proficiency in identity and cryptographic engineering, including implementing user credential management systems and enterprise key escrow systems.
Ability to communicate clearly through briefings and actionable technical runbooks for operations teams.

Responsibilities

Lead the design and implementation of advanced security solutions and architectures aligned with enterprise strategy and regulatory requirements.
Perform complex security assessments, including penetration testing, risk analysis, and evaluation of emerging threats.
Lead incident response and forensic investigations for major security incidents, determine root causes, and drive remediation plans.
Develop and maintain advanced security documentation, standards, and guidelines.
Identify security architecture and control gaps, recommend solutions, and influence implementation approaches.
Collaborate with cross-functional teams on secure system and software development, embedding security requirements early in design.
Evaluate emerging security technologies, tools, and industry trends to inform strategic planning and future capability development.
Work with vendors to assess, design, and implement advanced security products and managed services.
Provide technical leadership, mentor junior and mid-level engineering team members, and contribute to developing a high-performing security engineering practice.
Contribute architectural input to business continuity and disaster recovery planning and validate system readiness.