Lead Threat Detection Engineer

McKesson is looking for a Lead Threat Detection Engineer to join their global cyber threat intelligence, incident response, analytics, and engineering team. The ideal candidate will have experience in detection engineering, data engineering, incident response, threat hunting, and threat intelligence, and will be responsible for advancing detection capabilities and tools.

Requirements

• Prioritize detection use-case and scope and create a logical rule
• Ability to prioritize decisions to either write a rule and/or tune a tool/policy
• Practical experience with threat Actor tracking, tactics, tools, and techniques and working closely with Intel, SOC, and Red Teams (Purple Teams)
• Ability to measure detection coverage across common frameworks (e.g. NIST CSF, MITRE, KC) and simplify rules and configurations to optimize alerts
• Ability to automate tasks via scripting, automating inputs and outputs of APIs, and programming skills such as python to enable detection engineering tasks

Benefits

• Competitive compensation package
• Annual bonus or long-term incentive opportunities
• Comprehensive benefits package (available on the company's website)