Cybersecurity Engineer

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve – we care. What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow’s health today, we want to hear from you. Cybersecurity Engineer Location: Richmond, VA, USA - 9954 Mayland Drive (on-site) The Opportunity: The Cybersecurity Engineer is responsible for implementing and supporting secure solutions and contributing to operational security effectiveness. Working under the direction of senior engineers and architects, this role helps deploy and manage security controls, monitors for issues, supports incident response activities, and participates in projects that enhance the organizations security posture. The Cybersecurity Engineer takes initiative to assist with planning and execution, performs assigned tasks within scope and guidance, and follows established security policies, standards, and standard operating procedures. The engineer leverages internal and external research tools, documents work performed, escalates risks or issues appropriately, and contributes to a positive security culture through collaboration and continuous learning.

Implement, configure, and maintain security controls and tools according to documented designs, standards, and change-management procedures. Provide day-to-day operational support for security technologies (hardware, software, customer applications, and managed solutions), including monitoring, troubleshooting, and routine maintenance. Respond to service requests and escalation tickets within defined SLAs; document actions taken and outcomes. Support incident response activities by collecting logs and evidence, assisting with containment/eradication tasks, and participating in post-incident remediation activities as directed. Participate in security projects that assess existing controls and implement improvements; track tasks, risks, and dependencies and escalate issues when needed. Develop and execute security test plans based on provided requirements; identify deficiencies and recommend enhancements to avoid production impact. Work with security operations, infrastructure, and application teams to support secure configurations, vulnerability remediation, and compliance activities. Stay current on new security threats and relevant technologies; leverage research tools and share findings with the team. Perform other duties as assigned.

Degree or equivalent and typically requires 4+ years of relevant experience Skills and Qualifications 4+ years of experience in cybersecurity and/or IT security operations, systems administration, networking, or a related technical area (internship/co-op experience considered). Experience supporting or implementing security controls such as endpoint protection, vulnerability scanning, identity/access management, firewall rules, logging/monitoring, or secure configuration baselines. Ability to follow change management processes, document work, and meet SLA expectations for assigned tasks and tickets. Demonstrated willingness to learn new tools and technologies and to participate in training and continuous improvement activities. Working knowledge of common security controls and technologies such as SIEM, IDS/IPS, firewalls, antivirus/EDR, IAM, and vulnerability management tools. Experience implementing or supporting security solutions in on-prem and/or cloud environments; familiarity with basic cloud security concepts is preferred. Ability to follow documented procedures, troubleshoot technical issues, and