onsite
Senior Associate, Information Security Analyst - MCKESSON Careers
Security Engineer
Senior Associate, Information Security Analyst responsible for safeguarding enterprise data, conducting risk assessments, managing incident response, and ensuring compliance across cloud and on‑prem environments using SIEM and vulnerability tools.
About the role
Key Responsibilities
- Conduct comprehensive risk assessments and security audits across cloud and on‑prem infrastructures.
- Lead incident response activities, including investigation, containment, and remediation.
- Manage and maintain SIEM platforms, ensuring timely detection and alerting of security events.
- Develop and enforce security policies, procedures, and compliance controls aligned with industry standards.
- Collaborate with cross‑functional teams to integrate security best practices into development and operations.
Requirements
- 5+ years of experience in information security, with a focus on risk management and incident response.
- Proficiency with SIEM tools (e.g., Splunk, QRadar) and vulnerability management solutions.
- Strong understanding of cloud security (AWS, Azure, GCP) and related compliance frameworks (HIPAA, PCI‑DSS, ISO 27001).
- Excellent analytical, communication, and problem‑solving skills.
- Relevant certifications such as CISSP, CISM, or CEH preferred.