Sr. Associate Cloud Security Engineer

McKesson is an impact-driven, Fortune 10 company that touches virtually every aspect of healthcare. We are known for delivering insights, products, and services that make quality care more accessible and affordable. Here, we focus on the health, happiness, and well-being of you and those we serve - we care.

What you do at McKesson matters. We foster a culture where you can grow, make an impact, and are empowered to bring new ideas. Together, we thrive as we shape the future of health for patients, our communities, and our people. If you want to be part of tomorrow’s health today, we want to hear from you.

Sr. Associate Cloud Security Engineer (P2)

About the Role

As a Sr. Associate Cloud Security Engineer, you will help protect McKesson’s technology environment by implementing and maintaining security controls across cloud, hybrid, and on-premises platforms. Working as part of the Cybersecurity Engineering team, you will support secure infrastructure design, monitor security risks, and contribute to remediation and compliance activities that strengthen the organisation’s overall security posture. This role partners closely with infrastructure, network, cloud, and application teams to ensure security is embedded into technology decisions and daily operations. You will work under moderate guidance while building technical expertise and contributing to the continuous improvement of enterprise security capabilities.

What You’ll Do (Responsibilities)

• Implement and maintain security controls and configurations across cloud, network, and infrastructure environments, ensuring alignment with enterprise security standards.
• Analyse security alerts, investigate suspicious activity, and support incident response activities using enterprise security monitoring and telemetry tools.
• Assist with vulnerability management by validating findings, coordinating remediation efforts, and tracking issues through resolution.
• Review network access requests and connectivity requirements, ensuring access is appropriate, secure, and aligned with least-privilege principles.
• Evaluate network traffic, protocols, and communication flows to identify security risks and support secure network design.
• Support compliance, audit, and risk assessment activities by preparing evidence, reviewing control effectiveness, and identifying areas for improvement.
• Collaborate with cross-functional teams and technology partners to embed security requirements into system deployments, infrastructure changes, and cloud initiatives.

Basic Requirements

• Minimum Education & Typical Experience or Equivalent Combination: Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, with 2+ years of relevant experience in cybersecurity, network security, cloud security, infrastructure, or security operations.
• 2+ years of experience supporting cybersecurity, network security, IT infrastructure, or cloud technology environments.
• Strong knowledge of TCP/IP networking, routing, switching, DNS, HTTP, and enterprise network communications.
• Experience working with network security technologies such as firewalls, intrusion detection systems (IDS), intrusion prevention systems (IPS), VPNs, or network segmentation controls.
• Experience reviewing, governing, or supporting network access management within enterprise environments.
• Knowledge of security concepts including identity and access management, least privilege, vulnerability management, configuration hardening, and incident response.
• Experience supporting cloud or hybrid infrastructure environments and applying security controls within those environments.
• Basic scripting or programming experience for automation, integration, or operational efficiency initiatives.
• Familiarity with Windows and Linux operating systems in an enterprise environment.

Preferred Skills / Experience

• Exposure to Zero Trust security architectures and modern cloud networking concepts.
• Experience with cloud security platforms, policy-as-code practices, or security automation technologies.
• Strong communication skills with the ability to explain technical security concepts to both technical and non-technical stakeholders.

At McKesson, we care about the well-being of the patients and communities we serve, and that starts with caring for our people. That’s why we have a Total Rewards package that includes comprehensive benefits to supportphysical, mental, and financial well-being. Our Total Rewards offerings serve the different needs of our diverse employee population and ensure they are the healthiest versions of themselves.

As part of Total Rewards, we are proud to offer a competitive compensation package at McKesson. This is determined by several factors, including performance, experience and skills, equity, regular job market evaluations, and geographical markets. The pay range shown below is aligned with McKesson's pay philosophy, and pay will always be compliant with any applicable regulations.In addition to base pay, other compensation, such as an annual bonus or long-term incentive opportunities may be offered.

Our Base Pay Range for this position

McKesson has become aware of online recruiting-related scams in which individuals who are not affiliated with or authorized by McKesson are using McKesson’s (or affiliated entities, like CoverMyMeds or RxCrossroads) name in fraudulent emails, job postings or social media messages. In light of these scams, please bear the following in mind:

McKesson Talent Advisors will never solicit money or credit card information in connection with a McKesson job application.

McKesson Talent Advisors do not communicate with candidates via online chatrooms or using email accounts such as Gmail or Hotmail. Note that McKesson does rely on a virtual assistant (Gia) for certain recruiting-related communications with candidates.

McKesson job postings are posted on our career site: careers.mckesson.com.