CT -Sr Cyber Threat Hunter

1 month ago

Austin, United States MCKESSON Full time
McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care.

What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow's health today, we want to hear from you.

Job Summary

McKesson's Senior Cyber Threat Hunter will be a member or our Cyber Investigations & Response Team executing threat hunting activities across the Enterprise. You will be responsible for participating in threat actor-based investigations, creating new detection methodologies, and providing expert support to incident response and monitoring functions. Your mission is to timely detect, disrupt, and eradicate threat actors from enterprise networks. To execute this mission, you will use data analysis, threat intelligence, and cutting-edge security technologies. You will support the security operations by applying analytic and technical skills to investigate possible intrusions, identify malicious activity and potential insider threats, and collaborate with other team members on responding to detected incidents.

Responsibilities

  • Execute research, analysis, and response for alerts; including log retrieval and documentation.


  • Conduct analysis of network traffic and host activity across a wide array of technologies and platforms.


  • Assist in incident response activities such as host triage and retrieval, malware analysis, remote system analysis, end-user interviews, and remediation efforts.


  • Compile detailed investigation and analysis reports.


  • Work with the Cyber Threat Intelligence (CTI) team to assist in tracking threat actors and developing countermeasures in response to those threat actors.


  • Analyze malicious campaigns and evaluate effectiveness of security technologies.


  • Coordinate threat hunting activities across the network leveraging intelligence from multiple internal and external sources, as well as cutting- edge security technologies.


  • Perform Root Cause Analysis of security events and incidents for further enhancement of processes and detection/prevention strategies.


  • Develop dashboards and reports to identify potential threats, suspicioanomalous activity, malware, etc.


Requirements

  • 7+ years of relevant cyber security experience in Threat Hunting, IT Security, Incident Response or network security with strong knowledge working in a Security Operations Center, Incident Response team, or Threat Hunting team.


  • Experience with risk management, vulnerability management, threat analysis, security auditing, security monitoring, incident response and other information security practices preferred


  • Strong analytical and investigation skills & active threat hunting and adversary tracking.


  • Excellent written and oral communication skills with the ability to effectively communicate with information technology professionals as well as senior management and auditors, assessors, and consultants


  • High level of personal integrity, and the ability to professionally handle confidential matters and exude the appropriate level of judgment and maturity


  • Working knowledge of lateral movement, footholds, and data exfiltration techniques


  • Ability to mentor and potentially independently lead a team of global Cyber Threat Hunters.


Preferred Technical and Professional Expertise

  • One or more of the following security certifications or equivalent: GDAT (GIAC Defending Advanced Threats), Certified Cyber Threat Hunting Professional (CCTHP), Certified Threat Intelligence Analyst (CTIA), and GIAC Cyber Threat Intelligence (GCTI)


  • Bachelor's degree in a technical field such as Computer Science, Information Security, Information Technology, Computer Engineering, or Information Systems. or equivalent degree is preferred.


  • Knowledge of the underlying logic that security alerts are built upon and apply them when analyzing raw logs and creating new dashboards and alerts.


  • Experience and knowledge of packet flow, TCP/UDP traffic, firewall technologies, IDS technologies, proxy technologies, and antivirus, spam and spyware solutions.


  • Provide leadership and guidance to the team and act as a resource to the team members.


  • Experience with one or more scripting languages (e.g., Python, JavaScript, Perl)


  • Perform memory analysis and malware analysis


  • Experience with computer exploitation methodologies


We are proud to offer a competitive compensation package at McKesson as part of our Total Rewards. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations. In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered. For more information regarding benefits at McKesson, please

Our Base Pay Range for this position

$116,700 - $194,500

McKesson is an Equal Opportunity Employer

McKesson provides equal employment opportunities to applicants and employees and is committed to a diverse and inclusive environment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, age or genetic information. For additional information on McKesson's full Equal Employment Opportunity policies, visit our page.

Join us at McKesson CT -Sr Cyber Threat Hunter

  • CT -Sr Cyber Threat Hunter

    1 month ago

    AUSTIN, United States MCKESSON Full time

    McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve – we care.What you do at McKesson matters. We foster a...

  • CT- Lead Cyber Threat Hunter

    4 weeks ago

    Austin, United States MCKESSON Full time

    McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care.What you do at McKesson matters. We foster a culture...

  • Threat Hunter and Analyst

    1 week ago

    Austin, Texas, United States Unreal Gigs Full time

    About the Job:We're seeking an experienced Threat Hunter and Analyst to join our team at Unreal Gigs. As a key player in our security team, you'll play a critical role in identifying emerging cyber threats and providing actionable intelligence to protect our digital assets. The successful candidate will have a strong background in cybersecurity, specifically...

  • Cybersecurity Analyst

    4 weeks ago

    Austin, Texas, United States TEKsystems Full time

    About the RoleAs a Cybersecurity Analyst - Threat Hunter with TEKsystems, you will play a critical role in protecting our clients' networks and systems from cyber threats. You will be responsible for analyzing network traffic to identify anomalous activity and potential threats, documenting and escalating incidents, and performing cyber defense trend...

  • Cybersecurity Threat Hunter

    2 weeks ago

    Austin, Texas, United States Unreal Gigs Full time

    Job Title: Cybersecurity Threat HunterEstimated Salary: $85,000 - $110,000 per yearAbout the RoleWe are seeking a highly skilled Cybersecurity Threat Hunter to join our team at Unreal Gigs. As a key member of our security operations center, you will be responsible for monitoring and detecting potential security threats in real-time.In this role, you will...

  • Cybersecurity Threat Hunter

    3 weeks ago

    Austin, Texas, United States Unreal Gigs Full time

    At Unreal Gigs, we're seeking a highly skilled Cybersecurity Threat Hunter to join our team. As a key member of our security operations center (SOC), you'll play a critical role in protecting our digital assets from evolving threats. With a strong background in cybersecurity and experience working in a fast-paced environment, you'll be responsible for...

  • Cyber Threat Intelligence Lead

    1 week ago

    Austin, Texas, United States Unreal Gigs Full time

    Job Overview:A Cyber Threat Intelligence Lead is needed by Unreal Gigs to stay ahead of evolving threats. The ideal candidate will have 5+ years of experience in cybersecurity, with a focus on cyber threat intelligence, threat hunting, or incident response. They should be proficient in tracking nation-state actors, cybercriminals, and hacktivist groups.The...

  • Sr. Director Cyber Security Threat Detection

    1 day ago

    Austin, United States Synopsys Full time

    This position requires access to or use of information which is subject to export restrictions, including the International Traffic in Arms Regulations (ITAR). All applicants for this position must be "U.S. Persons" within the meaning of the ITAR. "U.S. Persons" include U.S. Citizens, U.S. Lawful Permanent Residents (i.e. 'Green Card Holders'), Political...

  • Sr. Director Cyber Security Threat Detection

    4 weeks ago

    Austin, TX, United States Synopsys, Inc. Full time

    We Are: At Synopsys, we drive the innovations that shape the way we live and connect. Our technology is central to the Era of Pervasive Intelligence, from self-driving cars to learning machines. We lead in chip design, verification, and IP integration, empowering the creation of high-performance silicon chips and software content. Join us to transform the...

  • Cyber Security Operations Specialist

    2 weeks ago

    Austin, Texas, United States KPMG Full time

    About the Role:We are seeking a highly skilled Cyber Security Operations Specialist to join our Enterprise Security Services organization. As a key member of our team, you will be responsible for managing and performing day-to-day operational responsibility of security monitoring and incident response activities.Responsibilities:Apply a thorough...

  • CT - Senior Security Event Analyst

    7 hours ago

    Austin, United States McKesson Corporation Full time

    McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care.What you do at McKesson matters. We foster a culture...

  • Enterprise Threat Response Lead

    3 weeks ago

    Austin, Texas, United States KPMG Full time

    About the Job:KPMG is currently seeking a talented individual to fill the role of Enterprise Threat Response Lead. This is a remote work opportunity that offers a challenging and dynamic work environment.Key Responsibilities:Leverage intelligence, lead and manage the monitoring for threats and vulnerabilities and respond accordingly, including the...

  • CT - Senior Security Event Analyst

    1 month ago

    AUSTIN, United States MCKESSON Full time

    McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve – we care.What you do at McKesson matters. We foster a...

  • Executive Director, Head of Global Cyber Defense

    1 day ago

    Austin, United States Jones Lang LaSalle Full time

    JLL empowers you to shape a brighter way.  Our people at JLL and JLL Technologies are shaping the future of real estate for a better world by combining world class services, advisory and technology for our clients. We are committed to hiring the best, most talented people  and empowering them to  thrive, grow meaningful careers and to find a place where...

  • Cyber Security Expert

    2 weeks ago

    Austin, Texas, United States YASH Technologies Full time

    Job OverviewAt YASH Technologies, we are seeking a highly skilled Cyber Security Expert to join our team. This is a senior-level position that requires a strong background in cybersecurity and experience in managing security measures and software.The ideal candidate will have a deep understanding of cybersecurity functions such as access control, monitoring,...

  • Cyber Security Analyst

    3 weeks ago

    Austin, United States YASH Technologies Full time

    Cybersecurity Analyst- CISSP or GIAC Certified LOCATION AUSTIN, TXDay 1 onsite Work Days (i.e. Monday-Friday) Work Hours (i.e. 8:00 AM - 5:00 PM CST) As Sr. Cyber Security Consultant, you will maintain and operates a variety of security measures and software that perform cybersecurity functions such as access control, monitoring or vulnerability assessment....

  • CT Tech Sr

    1 day ago

    Austin, United States Texas Oncology Full time

    Overview: Texas Oncology is looking for a CT Tech to join our team!This position will support the Radiation Oncology Department at our 4101 James Casey Street #100 location in Austin, Texas. Typical work is Monday through Friday, 7:30a - 4:00p OR 8:30a - 5:00p. Sign On Bonus: This position is offering a Sign On Bonus!!! This position will be either a level...

  • Cybersecurity Threat Detection

    1 month ago

    Austin, United States HP Development Company, L.P. Full time

    Cybersecurity Threat Detection & Response Engineer Description - Job Description As the world around us becomes more connected and more digital, there are increased opportunities for fraud and disruption due to cybersecurity attacks. The need for companies, products, and services to be secure is more important than ever in this constantly changing landscape....

  • Cyber Security Analyst

    3 weeks ago

    Austin, United States Apex Systems Full time

    **Candidates must be local to Texas upon application**Job DescriptionExperience with Endpoint Detection and Response (e.g.. EndGame, Crowdstrike, CyberReason, SentinelOne, Most interested in Microsoft)Experience with Email Threat Management (e.g. Proofpoint, MimeCast, Microsoft)Experience with Security Information and Event Management (e.g. Splunk, Rapid7,...

  • Cyber Security Analyst

    7 days ago

    Austin, United States Apex Systems Full time

    **Candidates must be local to Texas upon application**Job DescriptionExperience with Endpoint Detection and Response (e.g.. EndGame, Crowdstrike, CyberReason, SentinelOne, Most interested in Microsoft)Experience with Email Threat Management (e.g. Proofpoint, MimeCast, Microsoft)Experience with Security Information and Event Management (e.g. Splunk, Rapid7,...