CT- Lead Cyber Threat Hunter

2 days ago

Alpharetta, United States MCKESSON Full time
McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care.

What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow's health today, we want to hear from you.

Job Summary

McKesson's Global Cyber Threat Hunting Lead will be a member or our Cyber Investigations & Response Team executing threat hunting activities across the Enterprise. You will be responsible for leading threat actor-based investigations, implementing technical threat hunt methodologies, creating new detection methodologies, and providing expert support to incident response and monitoring functions. Your mission is to timely detect, disrupt, and eradicate threat actors from enterprise networks based on relevant and timely threat intelligence. To execute this mission, you will use data analysis, threat intelligence, and cutting-edge security technologies. You will support the security operations by applying analytic and technical skills to investigate intrusions, identify malicious activity and potential insider threats, and collaborate with the Incident Response Team on responding to detected incidents.

Responsibilities

  • Lead the research, analysis, and response for alerts; including log retrieval and documentation.


  • Conduct analysis of network traffic and host activity across a wide array of technologies and platforms.


  • Assist in incident response activities such as host triage and retrieval, malware analysis, remote system analysis, end-user interviews, and remediation efforts.


  • Compile detailed investigation and analysis reports.


  • Work with the Cyber Threat Intelligence (CTI) team to track threat actors and associated tactics, techniques, and procedures (TTPs) and develop countermeasures in response to those threat actors.


  • Analyze malicious campaigns and evaluate effectiveness of security technologies.


  • Coordinate threat hunting activities across the network leveraging intelligence from multiple internal and external sources, as well as cutting- edge security technologies.


  • Perform Root Cause Analysis of security events and incidents for further enhancement of processes and detection/prevention strategies.


  • Develop dashboards and reports to identify potential threats, suspicioanomalous activity, malware, etc.


Requirements

  • 10+ years of relevant cyber security experience in Threat Hunting, IT Security, Incident Response or network security with strong knowledge working in a Security Operations Center, Incident Response team, or Threat Hunting team.


  • Experience with risk management, vulnerability management, threat analysis, security auditing, security monitoring, incident response and other information security practices preferred


  • Strong analytical and investigation skills & active threat hunting and adversary tracking.


  • Excellent written and oral communication skills with the ability to effectively communicate with information technology professionals as well as senior management and auditors, assessors, and consultants


  • High level of personal integrity, and the ability to professionally handle confidential matters and exude the appropriate level of judgment and maturity


  • Working knowledge of root causes of malware infections and proactive mitigation.


  • Working knowledge of lateral movement, footholds, and data exfiltration techniques


  • Ability to mentor and potentially independently lead a team of global Cyber Threat Hunters.


Preferred Technical and Professional Expertise

  • One or more of the following technical security certifications or equivalent: GDAT (GIAC Defending Advanced Threats), Certified Cyber Threat Hunting Professional (CCTHP), Certified Threat Intelligence Analyst (CTIA), and GIAC Cyber Threat Intelligence (GCTI).


  • Master's degree in a technical field such as Computer Science, Information Security, Information Technology, Computer Engineering, or Information Systems. or equivalent degree is preferred.


  • Knowledge of the underlying logic that security alerts are built upon and apply them when analyzing raw logs and creating new dashboards and alerts.


  • Recognize complex problems, analyze situations and provide suggested/implemented resolution(s)


  • Experience and knowledge of packet flow, TCP/UDP traffic, firewall technologies, IDS technologies, proxy technologies, and antivirus, spam and spyware solutions.


  • Provide leadership and guidance to the team and act as a resource to the team members.


  • Experience with one or more scripting languages (e.g., Python, JavaScript, Perl)


  • Perform memory analysis and malware analysis


  • Experience with computer exploitation methodologies


We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. For more information regarding benefits at McKesson, please

Our Base Pay Range for this position

$139,000 - $231,600

McKesson is an Equal Opportunity Employer

McKesson provides equal employment opportunities to applicants and employees and is committed to a diverse and inclusive environment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age or genetic information. For additional information on McKesson's full Equal Employment Opportunity policies, visit our page.

Join us at McKesson CT- Lead Cyber Threat Hunter

  • CT -Sr Cyber Threat Hunter

    1 week ago

    Alpharetta, United States MCKESSON Full time

    McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care.What you do at McKesson matters. We foster a culture...

  • Global Cybersecurity Threat Hunter

    7 days ago

    Alpharetta, United States MCKESSON Full time

    At McKesson, we are seeking a highly skilled and experienced Global Cybersecurity Threat Hunter to join our team. As a key member of our Cyber Investigations & Response Team, you will be responsible for executing threat hunting activities across the Enterprise.Job OverviewOur Senior Cyber Threat Hunter will work closely with the Cyber Threat Intelligence...

  • Cyber Threat Hunting Expert

    4 days ago

    Alpharetta, United States MCKESSON Full time

    We are seeking a highly skilled Cyber Threat Hunting Expert to join our team at McKesson. As a member of our Cyber Investigations & Response Team, you will be responsible for leading threat actor-based investigations and implementing technical threat hunt methodologies.The ideal candidate will have 10+ years of relevant cyber security experience in Threat...

  • Cybersecurity Threat Mitigator

    3 weeks ago

    Alpharetta, United States AT&T Full time

    AT&T is a leader in integrated communications and entertainment. As a Cybersecurity Threat Mitigator, you will play a key role in safeguarding our assets.We estimate the salary for this position to be around $120,000 - $180,000 per year, depending on location and experience.Job DescriptionThis is a development position that involves participating in scrum...

  • CT - Cyber Program Manager

    1 week ago

    Alpharetta, United States MCKESSON Full time

    McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care.What you do at McKesson matters. We foster a culture...

  • Lead Incident Response Security Analyst

    1 month ago

    Alpharetta, GA, United States Optomi Full time

    Lead Incident Response Security Analyst - Hybrid in Alpharetta, GA*Optomi, in partnership with an IT Solutions company is looking to add a Lead Incident Response Security Analyst to their growing team! The Lead Incident Response Security Analyst will be part of a team investigating events of interest and incidents as they are validated, prioritized, and...

  • Cybersecurity Threat Response Manager

    7 days ago

    alpharetta, United States IDR, Inc. Full time

    Incident Response LeadWe are seeking a highly skilled Cybersecurity Threat Response Manager to join our team in Alpharetta, Georgia.This position is hybrid (4 days/week onsite); you must be local to Alpharetta, GA.About the Role:Lead incident response efforts and coordinate with various teams to ensure timely and effective resolutionConduct forensic...

  • CT - Lead IAM Engineer

    2 days ago

    Alpharetta, United States MCKESSON Full time

    McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care.What you do at McKesson matters. We foster a culture...

  • CT - Lead IAM Engineer

    2 days ago

    Alpharetta, United States MCKESSON Full time

    McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care.What you do at McKesson matters. We foster a culture...

  • Senior Network Security Architect

    1 week ago

    Alpharetta, United States SysMind Tech Full time

    Job DescriptionWe are seeking a highly skilled Senior Network Security Architect to join our team at SysMind Tech.Company OverviewSysMind Tech is a leading provider of innovative IT solutions, dedicated to delivering cutting-edge technology and exceptional service.Job SummaryThe Senior Network Security Architect will play a critical role in designing,...

  • Lead Identity Engineer

    1 week ago

    ALPHARETTA, United States MCKESSON Full time

    McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve – we care.What you do at McKesson matters. We foster a...

  • Lead Identity Engineer

    11 minutes ago

    Alpharetta, United States MCKESSON Full time

    McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care.What you do at McKesson matters. We foster a culture...

  • Lead Identity Engineer

    11 minutes ago

    Alpharetta, United States MCKESSON Full time

    McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care.What you do at McKesson matters. We foster a culture...

  • Incident Response Lead

    3 weeks ago

    Alpharetta, United States RemX Full time

    Job DescriptionJob DescriptionLOCATIONS: Onsite in Alpharetta GeorgiaPay: +$30/hr. (DOE)Start: November - (3 Month Contract)Title: Incident Response Lead As an Incident Response Lead you'll conduct incident response investigations on behalf of a wide variety of stakeholders. Must have a wide breath of knowledge across multiple IT and Information...

  • Security Engineer

    1 month ago

    Alpharetta, United States Jackson Healthcare Full time

    Overview Jackson Healthcare and our family of companies provide healthcare systems, hospitals and medical facilities of all sizes with the skilled and specialized labor and technologies they need to deliver high quality patient care and achieve the best possible outcomes - while connecting healthcare professionals to the temporary engagements, contract...

  • Cybersecurity Specialist

    6 days ago

    Alpharetta, United States Insight Global Full time

    Job OverviewWe are seeking an experienced Cybersecurity Specialist to join our team at Insight Global in Alpharetta, working hybrid Tuesdays and Thursdays. This 9-month contract offers a competitive hourly rate of $75-$85.About the RoleThe Senior Security Engineer will lead the design, implementation, and testing of security systems within our organization's...

  • Cybersecurity Architect

    1 week ago

    Alpharetta, United States Insight Global Full time

    Job SummaryWe are seeking a highly skilled Cybersecurity Architect to join our team at Insight Global. This is an exciting opportunity for a seasoned security professional to lead the design, implementation, and maintenance of our organization's IT network security systems.About the Role:Collaborate with cross-functional teams to develop and implement...

  • Identity and Access Management Strategist

    4 days ago

    Alpharetta, United States MCKESSON Full time

    MCKESSON, a Fortune 10 company, is an impact-driven organization that touches virtually every aspect of healthcare. Our goal is to deliver insights, products, and services that make quality care more accessible and affordable.We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the...

  • Cybersecurity Leader for Enterprise Infrastructure

    4 days ago

    Alpharetta, United States Datascan Technologies, LLC Full time

    At Datascan Technologies, LLC, we're seeking a seasoned Senior Security Engineer to spearhead our cybersecurity initiatives. This is a high-profile role that requires expertise in designing, implementing, and managing enterprise-wide security systems.Our ideal candidate will possess a deep understanding of IT risk management and information security...

  • Chief Information Security Architect

    6 days ago

    Alpharetta, Georgia, United States Datascan Technologies, LLC Full time

    Job DescriptionWe are seeking a highly skilled Senior Security Engineer to join our team at Datascan Technologies, LLC.About UsDatascan stands at the forefront of delivering cutting-edge wholesale asset financing and inventory risk management solutions. Our commitment lies in empowering lenders to efficiently oversee their operations and manage risk through...