Base Salary
$139k - $232k/yr
Responsibilities
- Mature manual detection practices into modern, automated, and standardized Detection-as-Code practices and infrastructure.
- Develop threat detection use cases based on intelligence, red-team results, and incident data.
- Develop IOC workflows and feedback loops for the Threat Intel Platform.
- Write detection and correlation rules across the security technology stack.
- Onboard logs, identify logging and alerting gaps, and develop understanding of data models, macros, indexes, sources, and field aliases.
- Automate detection engineering tasks using scripting, APIs, messaging systems, and Python.
- Measure detection coverage and optimize rules, signals, alerts, tools, and policies.
Requirements
- Ability to prioritize detection use cases, scope them, and create logical detection rules.
- Ability to decide whether to write a rule or tune an existing tool or policy.
- Practical experience tracking threat actors, tactics, tools, and techniques while working with threat intelligence, SOC, and red teams.
- Ability to measure detection coverage using frameworks such as NIST CSF and MITRE.
- Python programming, scripting, API automation, and understanding of automation and messaging systems.
- Splunk SPL knowledge and SIEM experience or additional SIEM background.
- Exceptional interpersonal, organizational, and communication skills.
- Ten or more years of professional experience across at least two domains such as detection engineering, data engineering, incident response, threat hunting, and threat intelligence are advantageous.
- A bachelor’s degree in computer science, information security, security engineering, statistics, or data science is advantageous.
- Chronicle experience, Splunk certifications, automation certifications such as Security with Python SEC573, and Sigma Rules knowledge are advantageous.
Benefits
- Base pay is listed as $139,000–$231,600, with potential annual bonus or long-term incentive opportunities.
- McKesson offers a competitive total rewards package, with benefits information available through the company benefits page.
- McKesson is an equal opportunity employer committed to a diverse and inclusive workplace.
About McKesson
Welcome to the official LinkedIn page for McKesson Corporation. We're an impact-driven healthcare organization dedicated to “Advancing Health Outcomes For All.” As a global healthcare company, we touch virtually every aspect of health. Our leaders empower our people to lead with a growth mindset and deliver excellence for our customers, partners, and the wellbeing of people, everywhere. We work with biopharma companies, care providers, pharmacies, manufacturers, governments, and others to deliver insights, products and services that make quality care more accessible and affordable. Delivering better health outcomes for our employees, our communities, and our environment. Every day, we strive to inspire and enable people to reach their full potential. To learn more about how #TeamMckesson helps improve care in every setting, visit: https://bit.ly/3xadvB0