Senior Vulnerability Management Operations Engineer, Cork
Mckesson is in the business of better health, and we touch the lives of patients in virtually every aspect of healthcare. We partner with payors, hospitals, physician offices, pharmacies, pharmaceutical companies, and others across the spectrum of care to build healthier organizations that deliver better care to patients in every setting.
We believe in the importance of strong, vital organizations because we know that patients can only be healthy when our system is healthy. Every single McKesson employee contributes to our mission—by joining McKesson you act as a catalyst in a chain of events that helps millions of people all over the globe. Talented, compassionate people are the future of our company—and of healthcare.
We're looking for a Senior Vulnerability Management Operations Engineer to help support information security capabilities and compliance across Business units and Enterprise IT organizations within McKesson. As a Senior Vulnerability Management Operations Engineer you will be a key member of our Cybersecurity team.
Key Responsibilities:
* Lead the deployment, configuration and optimization of McKesson's Vulnerability Management Solution (VMS)
* Establish clear understanding and documentation of all infrastructure associated with McKesson's VMS
* Periodically assess McKesson's VMS configuration to ensure that all sites, exclusions, users and policies are accurate and up to date
* Work with the Solution, Platform, Risk Management and Global Threat and Vulnerability Management teams to ensure operating system, and network vulnerabilities are patched or remediated in line with security policy requirements
* Develop and maintain processes, policies and procedures to ensure McKesson's Vulnerability Management solution remains compliant with McKesson's security standards and industry best practice – including maintenance and support procedures
* Collaborate with cross-functional teams to prioritize vulnerabilities based on business impact
Requirements:
* 10+ years in systems/application security, handling security products in enterprise settings
* Proven experience in Network Security, Vulnerability Management, Cloud Security, and Data Protection
* Skilled in managing VMS, identifying risks, and remediating vulnerabilities
* Capable of documenting vulnerabilities and communicating solutions effectively
* Experience with vulnerability management software including tools like Veracode, Twistlock, MPT, Rapid7 Nexpose, or Tenable
* Extensive experience in Security Engineering/Operations in matrixed enterprises
* Expert Knowledge of identity access management (e.g., MFA, privileged access, SSO)
* Familiar with Security Frameworks (NIST, ISO, Cloud Security Alliance, etc.)
* Holds security certifications such as CISSP, GPEN, GCIH, CEH, CISA, CRISC, IAT, CISM, or GIAC advantageous
Additional Skills:
* Knowledge of healthcare, privacy, and financial compliance regulations
* Knowledge and experience with secure deployment of applications within cloud environment
* Strong analytical and troubleshooting skills with an understanding of IT business operations and information security
Total Rewards:
We have a Total Rewards package that includes comprehensive benefits to support physical, mental, and financial well-being. Our Total Rewards offerings serve the different needs of our diverse employee population and ensure they are the healthiest versions of themselves.
As part of Total Rewards, we are proud to offer a competitive compensation package at McKesson. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets.