McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve – we care.
What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow’s health today, we want to hear from you.
Job Overview:
As a Cybersecurity Event Analyst, you will be a pivotal member of our Cyber Investigation & Response Team. Your advanced analytical skills, leadership qualities, and deep understanding of cybersecurity principles will be crucial in fortifying our organization's security infrastructure. This role offers a dynamic environment where your expertise will be harnessed to address complex security challenges, working alongside top-tier professionals in the industry.
In this position, you will lead the efforts in monitoring and analyzing security events and alerts, delivering comprehensive analysis and strategic insights to proactively safeguard our systems. You will leverage cutting-edge tools and technologies to identify, assess, and mitigate potential threats.
This position is ideal for individuals with a proven track record in cybersecurity, demonstrating a proactive approach and strategic thinking. We value leadership and innovation, encouraging you to drive initiatives that enhance our security posture and contribute to the broader organizational goals. Your role will not only impact our immediate security measures but also influence long-term strategic planning.
Whether you are a cybersecurity professional with some experience or someone building expertise in the field, this role offers an excellent opportunity to advance your career in this dynamic and essential sector.
Key Responsibilities:
Independently serves as the initial point of contact for event review, acting as the first eyes on glass.
Conduct complete investigations and triage security events to determine their nature and severity.
Partners on complex or high-severity events with Senior / Lead Analysts for further review and action.
Collaborates and provides solutions to senior team members to improve processes.
Independently maintains accurate documentation of incidents and actions taken.
Engages and facilitates ongoing learning opportunities to expand knowledge in SIEM (Security Information and Event Management), EDR (Endpoint Detection and Response), and other relevant areas.
Required / Basic Qualifications:
4+ years in cybersecurity or related field
SIEM Tools Proficiency - Experience with platforms like Splunk, IBM QRadar, ArcSight, or Microsoft Sentinel.
Ability to create and interpret alerts, dashboards, and correlation rules.
Log Analysis - Understanding of system, network, and application logs
Incident Response - Skills in triaging, investigating, and documenting security events and familiarity with incident response frameworks (e.g., NIST, SANS).
Threat Intelligence - Ability to correlate threat feeds with internal data.
Understanding of MITRE ATT&CK framework and TTPs (Tactics, Techniques, Procedures).
Endpoint Detection & Response (EDR)
Experience with tools like CrowdStrike, SentinelOne, or Microsoft Defender for Endpoint.
Preferred Qualifications:
Strong analytical skills and attention to detail. Excellent communication skills, both written and verbal. Ability to work collaboratively in a team environment and seek guidance from senior members. Digital Forensics: Basic knowledge of forensic imaging and analysis.Reverse Engineering: Understanding of malware behavior and static/dynamic analysis.Compliance & Governance: Awareness of standards like ISO 27001, GDPR, or HIPAAThorough understanding of cybersecurity, to include coding, problem-solving, SIEM, and EDR concepts.
Certifications & Qualifications:
Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
Certifications in cybersecurity (e.g., CompTIA Security+, CEH) are a plus but not mandatory.
At McKesson, we care about the well-being of the patients and communities we serve, and that starts with caring for our people. That’s why we have a Total Rewards package that includes comprehensive benefits to support physical, mental, and financial well-being. Our Total Rewards offerings serve the different needs of our diverse employee population and ensure they are the healthiest versions of themselves.
As part of Total Rewards, we are proud to offer a competitive compensation package at McKesson. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered.
Our Base Pay Range for this position
€53,300 - €88,800