Senior Cybersecurity Analyst

This is a fully remote position, open to applicants in Arizona, +2 more locations.

📋 Description

• Oversee, identify, assess, and prioritize security alerts and events within enterprise environments.

• Act as a senior escalation contact for security incidents and assist in deciding if a cybersecurity incident should be officially declared.

• Aid in the investigation, containment, eradication, recovery, root-cause analysis, and reporting following incidents.

• Recognize common tools, tactics, and procedures used by attackers by utilizing threat intelligence and the MITRE ATT&CK framework.

• Enhance SIEM and EDR detections, investigation playbooks, alert quality, and incident response procedures.

• Engage in or assist with proactive threat-hunting and security analysis initiatives.

• Contribute to post-incident evaluations, operational reporting, security metrics, and ongoing improvement efforts.

• Guide junior analysts and convey security risks and recommendations to both technical and non-technical audiences.

• Take part in incident response efforts outside of regular business hours when necessary.

⛳️ Requirements

• Over 6 years of professional experience in cybersecurity, specifically in security operations, threat detection, or incident response.

• Practical experience with SIEM and EDR technologies.

• Familiarity with the MITRE ATT&CK framework and the NIST incident response lifecycle.

• Possession of one or more relevant cybersecurity certifications, such as SANS GCIH, GCIA, CompTIA CySA+, or an equivalent qualification.

• Capability to investigate security incidents, analyze incomplete or conflicting information, and formulate defensible conclusions.

• Strong skills in analysis, problem-solving, documentation, and prioritization.

• Proficient in communicating security findings, risks, and proposed actions to both technical and non-technical stakeholders.

• Preferred: expertise in digital forensics, threat hunting, malware analysis, or security automation and orchestration.

• Preferred: knowledge of cloud security, cloud-native security monitoring, and identity and access management.

• Preferred: experience in creating or fine-tuning SIEM correlation rules, EDR detections, alerts, dashboards, or response playbooks.

• Preferred: understanding of cyber threat intelligence and common attacker tools, tactics, techniques, and procedures.

• Preferred: background in healthcare, pharmaceutical distribution, supply chain, or software sectors.

• Preferred: experience with scripting or automation using Python, PowerShell, APIs, or SOAR technologies.

• Preferred: ability to quickly learn, evaluate, and recommend new cybersecurity tools and technologies.

• Preferred: experience mentoring analysts or disseminating technical knowledge within a security operations team.

🏝️ Benefits

• Competitive compensation package.

• Potential for an annual bonus.

• Opportunities for long-term incentives may be available.

• Benefits provided through McKesson’s Total Rewards program.

• Commitment to equal employment opportunity.

• Reasonable accommodations for job searches or applications.