over 1 year ago
Base Salary
$139k - $232k/yr
Responsibilities
- Mature manual detection practices into modern, automated, and standardized Detection-as-Code practices and infrastructure.
- Develop threat detection use cases based on intelligence, red-team results, and incident data.
- Develop IOC workflows and feedback loops for the Threat Intel Platform.
- Write detection and correlation rules across the security technology stack.
- Onboard logs, identify logging and alerting gaps, and develop understanding of data models, macros, indexes, sources, and field aliases.
- Automate detection engineering tasks using scripting, APIs, messaging systems, and Python.
- Measure detection coverage and optimize rules, signals, alerts, tools, and policies.
Requirements
- Ability to prioritize detection use cases, scope them, and create logical detection rules.
- Ability to decide whether to write a rule or tune an existing tool or policy.
- Practical experience tracking threat actors, tactics, tools, and techniques while working with threat intelligence, SOC, and red teams.
- Ability to measure detection coverage using frameworks such as NIST CSF and MITRE.
- Python programming, scripting, API automation, and understanding of automation and messaging systems.
- Splunk SPL knowledge and SIEM experience or additional SIEM background.
- Exceptional interpersonal, organizational, and communication skills.
- Ten or more years of professional experience across at least two domains such as detection engineering, data engineering, incident response, threat hunting, and threat intelligence are advantageous.
- A bachelor’s degree in computer science, information security, security engineering, statistics, or data science is advantageous.
- Chronicle experience, Splunk certifications, automation certifications such as Security with Python SEC573, and Sigma Rules knowledge are advantageous.
Benefits
- Base pay is listed as $139,000–$231,600, with potential annual bonus or long-term incentive opportunities.
- McKesson offers a competitive total rewards package, with benefits information available through the company benefits page.
- McKesson is an equal opportunity employer committed to a diverse and inclusive workplace.
About McKesson
McKesson is a public healthcare company that distributes pharmaceuticals and medical‑surgical supplies and provides pharmacy and provider technology and services. It sells to pharmacies, hospitals, health systems, and biopharma manufacturers through logistics, specialty and oncology support, pharmacy management, and healthcare IT/analytics offerings. Founded in 1833 and headquartered in Irving, Texas, it trades on the NYSE under the ticker MCK.