{"id":2832213,"url":"https://alion.io/job/mckesson-lead-devsecops-engineer","title":"Lead DevSecOps Engineer","company":{"id":4393,"name":"McKesson","domain":"mckesson.com","url":"https://alion.io/company/mckesson","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":80,"open_postings":33,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":12,"computed_at":"2026-10-24T06:02:35Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Cork, Ireland"],"countries":["IE"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":82500,"max":137500,"currency":"EUR","period":"year","gross":null,"usd_annual":154581},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"CI/CD","optional":false},{"name":"Docker","optional":false},{"name":"GCP","optional":false},{"name":"GitHub","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab","optional":false},{"name":"GitLab CI","optional":false},{"name":"JavaScript","optional":false},{"name":"Jenkins","optional":false},{"name":"JFrog Xray","optional":false},{"name":"Kubernetes","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"Python","optional":false},{"name":"SonarQube","optional":false},{"name":"Sonatype Nexus IQ","optional":false},{"name":"Terraform","optional":false},{"name":"Veracode","optional":false},{"name":"Gmail","optional":true},{"name":"SBOM","optional":true},{"name":"Threat Modeling","optional":true},{"name":"Zero Trust","optional":true}],"status":"live","first_seen_at":"2026-10-05T00:00:00Z","employer_posted_date":"2026-10-05","last_verified_at":"2026-10-23T07:59:57Z","board_verified":true,"closed_at":null,"days_open":19,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":19},"description":"McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care.\nWhat you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow’s health today, we want to hear from you.\nWhat You'll Do\nLead enterprise application security and DevSecOps initiatives across cloud, on-premises, and hybrid environments.\nDesign and implement scalable security controls embedded within CI/CD pipelines and developer platforms.\nDrive adoption and operationalization of security tools including GitHub Advanced Security, OWASP ZAP, Veracode, and SonarQube.\nLead software supply chain security programs using tools such as JFrog Xray/Curation, Black Duck, Sonatype, and FOSSA.\nDevelop automation and security integrations using Python, Bash, JavaScript, or similar scripting languages.\nPartner with engineering and platform teams to establish secure-by-design practices for applications, APIs, containers, and cloud workloads.\nProvide technical leadership during security incidents, vulnerability management efforts, and remediation activities.\nMentor engineers and influence enterprise security architecture, standards, and roadmaps.\nDevelop and maintain security standards and controls for Kubernetes, containers, Infrastructure as Code (Terraform), and cloud-native application platforms.\nBuild and operationalize security automation, policy-as-code, and self-service security capabilities that improve developer experience while reducing organizational risk.\nBasic Requirements\n10+ years of progressive experience in cybersecurity engineering, application security, DevSecOps, cloud security, or related security engineering disciplines.\nBachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering, or equivalent experience.\nExperience implementing and operating enterprise-scale security tools such as GitHub Advanced Security, SonarQube, and/or OWASP ZAP.\nExperience with software supply chain security and open-source risk management tools such as JFrog Xray/Curation, Black Duck, Sonatype, or FOSSA.\nProficiency in scripting and automation using Python, Bash, JavaScript, or similar languages.\nExperience designing and securing CI/CD pipelines using GitHub Actions, Jenkins, GitLab CI, Azure DevOps, or comparable platforms.\nHands-on experience securing cloud environments (AWS, Azure, and/or GCP).\nExperience with containerization and orchestration technologies including Docker and Kubernetes.\nExperience managing enterprise source code management platforms such as Github or Gitlab, developer ecosystems, and software delivery infrastructure.\nPreferred Skills/Experience\nMaster's degree in Cybersecurity, Computer Science, or related field.\nExperience implementing policy-as-code, infrastructure-as-code security, and automated security guardrails.\nExperience with threat modeling, secure code reviews, and application security testing methodologies.\nKnowledge of zero-trust architectures, identity security, cryptography, and cloud-native security controls.\nExperience building security metrics, dashboards, and executive-level reporting.\nRelevant certifications such as CISSP, CCSP, CSSLP, AWS Security Specialty, Azure Security Engineer, or GIAC certifications.\nExperience leading large-scale security transformation initiatives in highly regulated environments.\nExperience mentoring engineers and serving as a technical leader across multiple teams.\nExperience securing and managing Kubernetes platforms, container registries, and cloud-native application environments.\nExperience implementing software supply chain security controls including artifact signing, SBOM management, provenance, dependency governance, and secure build practices.\nAt McKesson, we care about the well-being of the patients and communities we serve, and that starts with caring for our people. That’s why we have a Total Rewards package that includes comprehensive benefits to supportphysical, mental, and financial well-being. Our Total Rewards offerings serve the different needs of our diverse employee population and ensure they are the healthiest versions of themselves.\nAs part of Total Rewards, we are proud to offer a competitive compensation package at McKesson. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations.In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered.\nOur Base Pay Range for this position\n€82,500 - €137,500McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson’s (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind:\nMcKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application.\nMcKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates.\nMcKesson job postings are posted on our career site: careers.mckesson.com.","description_format":"text","description_chars":5865,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"Ireland","iso":"IE","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Health Care","Pharmaceutical Distribution","Medical Equipment Distribution"],"lifecycle":[{"event":"open","at":"2026-10-19T03:39:23Z"}],"visa":[],"liveness":{"score":23,"band":"cold","label":"Long shot","p_open":1,"p_active":0.508,"p_room":0.45,"age_days":19,"expected_fill_days":12,"reasons":["conf:22","stale_co","velocity","win:tail","comp:brand"],"computed_at":"2026-10-24T06:02:35Z"},"pay":{"stated_usd_annual":154581,"is_top_pay":false},"html_url":"https://alion.io/job/mckesson-lead-devsecops-engineer","json_url":"https://alion.io/job/mckesson-lead-devsecops-engineer.json","meta":{"generated_at":"2026-10-24T07:56:59Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11794,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4393},"rest":"https://alion.io/mcp/rest/get_company?id=4393"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmckesson-lead-devsecops-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmckesson-lead-devsecops-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmckesson-lead-devsecops-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/mckesson-lead-devsecops-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmckesson-lead-devsecops-engineer"}]}