McKesson

McKesson

Sr. Director, Cyber Engineering

USA, VA, Richmond · Director

Sponsorship not specifiedDetected 112 days ago
GCPCloud PlatformsCI/CDDevOpsPlatform EngineeringCybersecurityNetwork SecuritySIEMSOARComplianceStakeholder ManagementOKRsBudgetingPerformance ManagementFirewallHIPAALeadershipCommunicationMentoringCISSP

Stay score

odds of building a lasting career here

42Risky
Cap-exempt (no lottery)0
Sponsors this role100
Entry-level history0
PERM / green-card track0
Lottery odds40
Fits your clock70

Thin sponsorship signal and lottery-bound. A low-probability bet with your clock running. Prioritize cap-exempt roles and proven entry-level sponsors first.

Lottery odds assume a STEM candidate.

Personalize to your clock →

Employer immigration record

from this employer's Department of Labor filings

Green-card filing pattern in this occupation

Context, not a finding about this posting: of this employer's 34 green-card filings in this occupation, 100% were for a worker who already held the job.

Green-card follow-through: 81%

Of 21 labor certifications old enough to have been used, 4 expired without the employer filing the next step. Median time from filing to decision: 484 days.100% of their filings were for a worker who already held the job.Only certifications past the 180-day window are counted — recent ones cannot have expired yet.

Files H-1B transfers

4 transfer filings in the last year, covering 4 workers. Median labor-condition decision: 22 days. An employer that already files transfers is one that can take over an existing H-1B.

Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.

Community outcomes

No reports yet — be the first to help the next applicant.

About the role

  • This role requires strong technical depth in security engineering and the leadership maturity to operate at the executive level.
  • The Director establishes cybersecurity engineering strategy, multi-year roadmaps, and success metrics; governs an operating rhythm for delivery and reliability; and ensures outcomes are achieved across multiple teams (often through influence).

Responsibilities

  • Define and own the cybersecurity engineering strategy and operating model (platform engineering, control implementation, automation, reliability) aligned to business risk, technology priorities, and security architecture.
  • Own the security engineering platform portfolio: select, integrate, and manage lifecycle for security tooling and services (e.g., IAM/PAM, PKI, EDR, CSPM, vulnerability management, secrets management, WAF, DLP, SIEM/SOAR integrations) with clear service models and reliability targets.
  • Partner with architecture, engineering, and product teams to embed security into delivery (DevSecOps): define engineering standards, reusable patterns, and automated guardrails
  • ensure solutions are compliant-by-design and supported with appropriate documentation and evidence.
  • Build and lead high-performing cybersecurity engineering teams through hiring, coaching, performance management, and career development
  • Manage cross-functional stakeholder relationships (Technology leaders, risk/compliance, audit, legal/privacy, and vendors) and translate technical risk and engineering tradeoffs into business impact and investment decisions.
  • Partner with architecture, engineering, and product teams to embed security into delivery (DevSecOps): define engineering standards, reusable patterns, and automated guardrails; enable teams with reference implementations and self-service capabilities.
  • Establish governance for engineering delivery: intake and prioritization, roadmaps, architecture/engineering reviews, change management, and exception processes; ensure solutions are compliant-by-design and supported with appropriate documentation and evidence.
  • Build and lead high-performing cybersecurity engineering teams through hiring, coaching, performance management, and career development; establish standards for engineering quality, critical review, and operational discipline.
  • Proven ability to deliver engineering outcomes at scale building standardized services, defining SLAs/SLOs, automating controls, and driving adoption across diverse technology stacks.

Requirements

  • Degree or equivalent experience.
  • Typically requires 15+ years of professional experience and 10+ years of diversified leadership, planning, communication, organization, and people motivation skills or equivalent experience).
  • 15+ years of progressive cybersecurity/technology experience with demonstrated depth in building and operating security controls and platforms.
  • 10+ years leading engineering teams and/or enterprise programs, including setting strategy, defining metrics, managing budgets/vendors, and driving execution across multiple stakeholders.
  • Executive-ready communication and stakeholder management skills, including the ability to present risk, progress, and investment needs to senior leadership and influence decisions.
  • Experience establishing oversight metrics and operational rhythms (OKRs/KPIs, service reviews, delivery governance) and using data to improve engineering throughput, automation, and control effectiveness.
  • Proven capability managing vendor relationships and service contracts for security platforms and managed services, including defining requirements, budgeting, and measuring performance against SLAs/SLOs.
  • Strong understanding of privacy and data handling considerations
  • Experience partnering with detection/response and vulnerability teams to ensure engineered controls are measurable, testable, and improve incident outcomes

Skills

  • Education Requirements
  • Certification Requirements
  • About Medical-Surgical
  • McKesson Medical-Surgical (MMS) is a subsidiary and publicly reported segment of the McKesson Corporation.
  • Alternate Care markets are growing rapidly and MMS is proud to be a leader in this space.
  • Looking Ahead: A New Chapter for MMS

Compensation

  • We will also continue to be one of the largest medical-surgical distributors in the U.S., with over $11B in annual sales.

Company info

  • We are known for delivering insights, products, and services that make quality care more accessible and affordable.
  • If you want to be part of tomorrow's health today, we want to hear from you.
  • This separation would accelerate our mission and empower us to shape a future defined by customer-centricity, bold thinking and operational excellence.
  • Ensure security engineering services are reliable and operationally mature: define SLAs/SLOs, partner with SOC/CSIRT during incidents for engineering response and hardening, and drive post-incident corrective actions into durable platform improvements.

Visa & Work Authorization

  • response and vulnerability teams to ensure engineered controls are measurable, testable, and improve incident outcomes; sponsor exercises and continuous improvement initiatives
Apply directly at McKesson →Create a free account for alerts like thisView McKesson immigration profile

This listing is sourced directly from McKesson's careers page and normalized into a canonical job model.