McKesson

McKesson

Sr. Director, Cyber Threat Detection & Response

USA, VA, Richmond · Director

Sponsorship not specifiedDetected 22 days ago
GCPCloud PlatformsDevOpsCybersecuritySIEMSOARUEBASOC OperationsDetection EngineeringIncident ResponseStakeholder ManagementOKRsPerformance ManagementLeadershipCommunicationMentoring

About the role

  • This role requires strong technical depth in threat detection and response as well as the leadership maturity to operate at the executive level.
  • The Director establishes TDR strategy, roadmaps, and success metrics; governs an operating rhythm for detection coverage and remediation execution; and ensures outcomes are delivered across multiple teams (often via influence).

Responsibilities

  • Define and own the enterprise TDR strategy and operating model (detection engineering, alerting standards, response readiness, and remediation governance) aligned to business risk and technology priorities.
  • Lead selection, adoption, and lifecycle management of detection and response tooling and telemetry (SIEM, EDR/XDR, SOAR, UEBA, threat intel integrations, cloud logging, and case management), including integration standards and data quality requirements.
  • Partner with Security Operations (SOC/CSIRT), threat intelligence, vulnerability management, and platform teams to ensure detections map to prioritized threats and that response playbooks and automation are effective and current.
  • Establish remediation governance to drive closure of systemic security gaps identified through incidents, threat hunting, purple teaming, and control validation
  • Drive enterprise telemetry and logging strategy in partnership with engineering and infrastructure: ensure critical systems are instrumented, logs are retained appropriately, and detections can be built and tuned against reliable data sources.
  • Lead and develop TDR talent (leaders, detection engineers, analysts) through hiring, coaching, performance management, and capability development
  • Manage cross-functional stakeholder relationships and communications (Technology leaders, risk/compliance, audit, legal/privacy as needed), translating technical risk into business impact and driving alignment on funding, priorities, and delivery commitments.
  • Provide governance for incident and post-incident remediation: ensure lessons learned translate into durable control improvements, and conduct regular exercises/tabletops to validate readiness and benchmark progress.
  • Establish remediation governance to drive closure of systemic security gaps identified through incidents, threat hunting, purple teaming, and control validation; ensure clear ownership, prioritization, timelines, and exception processes.
  • McKesson has announced its intent to separate MMS into an independent company - an exciting evolution that builds on MMS's strong foundation and proven leadership in the Alternate Care space.

Requirements

  • 15+ years of cybersecurity experience with significant depth in threat detection, incident response, and security operations, including 10+ years leading teams and/or enterprise programs.
  • Hands-on and leadership experience with detection and response platforms and practices (SIEM content engineering, EDR/XDR, SOAR automation, threat intel integration, logging/telemetry pipelines, and case management).
  • Executive-ready communication and stakeholder management skills, including the ability to present risk, progress, and investment needs to senior leadership and influence decisions
  • Degree or equivalent experience.
  • Typically requires 15+ years of professional experience and 10+ years of diversified leadership, planning, communication, organization, and people motivation skills (or equivalent experience).
  • Experience establishing oversight metrics and operational rhythms (OKRs/KPIs, reporting, service reviews) and using data to improve alert quality, reduce noise, and accelerate remediation throughput.
  • Proven capability managing vendor relationships and service contracts for security tooling and managed services, including defining requirements and measuring performance against outcomes.
  • Strong understanding of privacy considerations and appropriate monitoring practices
  • Proven ability to drive remediation outcomes at scale establishing SLAs, clarifying ownership, prioritizing backlogs, and closing systemic gaps surfaced by incidents, hunts, and assessments.
  • Demonstrated ability to set strategy, secure organizational alignment/approvals, and deliver outcomes through multiple stakeholders (Security, Infrastructure, Cloud, Application/Product, and business teams).
  • Deep understanding of detection engineering, telemetry pipelines, and security analytics: SIEM content engineering, EDR/XDR detections, SOAR automation, threat intelligence integration, alert triage models, and case management workflows.

Nice to have

  • CISSP, CISM, GIAC/SANS, +, SSCP, or equivalent foundational security certification.

Skills

  • Education Requirements
  • Certification Requirements
  • About Medical-Surgical
  • McKesson Medical-Surgical (MMS) is a subsidiary and publicly reported segment of the McKesson Corporation.
  • Alternate Care markets are growing rapidly and MMS is proud to be a leader in this space.
  • Looking Ahead: A New Chapter for MMS
  • Career Level - M5

Compensation

  • We will also continue to be one of the largest medical-surgical distributors in the U.S., with over $11B in annual sales.

Benefits

  • McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare.
  • Here, we focus on the health, happiness, and well-being of you and those we serve - we care.
  • Together, we thrive as we shape the future of health for patients, our communities, and our people.
  • If you want to be part of tomorrow's health today, we want to hear from you.
  • We will also continue to be one of the largest medical-surgical distributors in the U.S., with over $11B in annual sales.

Company info

  • We are known for delivering insights, products, and services that make quality care more accessible and affordable.
  • This separation would accelerate our mission and empower us to shape a future defined by customer-centricity, bold thinking and operational excellence.

Equal opportunity

  • careers.mckesson.com.
  • McKesson is an Equal Opportunity Employer
  • McKesson provides equal employment opportunities to applicants and employees, without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age, genetic information, or any other legally protected category.
  • For additional information on McKesson's full Equal Employment Opportunity policies, vi
Apply directly at McKesson →Create a free account for alerts like thisView McKesson immigration profile

This listing is sourced directly from McKesson's careers page and normalized into a canonical job model.