below marketmost similar roles pay hereabove market
This role pays more than
55%
of similar roles. Most pay
$132,000–$184,325
— the blue band above.
At the midpoint, this role pays about
$163k
versus about
$158k
for comparable roles.
Based on 240 similar postings.
Employer
About McKesson Corporation
McKesson Corporation is a premier American healthcare services company that distributes pharmaceuticals, medical-surgical supplies, and provides technology to the healthcare industry.
McKesson Corporation currently has
150 open roles
on FindRole.
Listed pay typically runs
$122,600–$204,400
across 75 roles with salary data.
JOB TITLE: Senior Information Security Analyst
The Senior Information Security Analyst joins the security team to strengthen the cloud security posture and reduce enterprise cyber risk. This role involves leading the triage, prioritization, remediation, and validation of cloud security findings identified through Wiz. The analyst will partner with application, cloud platform, engineering, and infrastructure teams to resolve Critical and High-risk vulnerabilities, establish ownership for unknown cloud assets, and manage security exceptions. Key responsibilities include translating technical findings into remediation plans and operational metrics. The position requires expertise in cloud vulnerability management, exposure management, and risk-based prioritization across GCP, AWS, or Azure architectures. Required tools and technologies include Wiz, ServiceNow, and Rapid7. The role focuses on managing vulnerabilities, misconfigurations, and attack paths within complex cloud workloads, including virtual machines, containers, and serverless resources.
Triage and prioritize cloud security findings based on severity, exploitability, and business impact.
Drive remediation of critical and high-risk vulnerabilities by establishing action plans with engineering and infrastructure owners.
Investigate and assign ownership to unknown cloud assets including virtual machines, containers, and serverless resources.
Review and validate security exceptions, suppressions, and risk-acceptance requests while maintaining audit-ready records.
Validate vulnerability closures and conduct root-cause investigations to identify recurring security issues.
Improve remediation workflows and automation by integrating tools like Wiz, ServiceNow, Rapid7, and Panorama.
Report on key security metrics including Mean Time to Remediate, overdue vulnerabilities, and risk-reduction outcomes.
What we're looking for
7+ years of progressive experience in cybersecurity engineering, cloud security, vulnerability management, exposure management, infrastructure security, or a related field.
Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, or a related discipline, or an equivalent combination of education and experience.
Demonstrated experience triaging, prioritizing, and driving remediation of cloud vulnerabilities or security findings.
Hands-on experience using Wiz or a comparable cloud security, CNAPP, CSPM, or vulnerability-management platform.
Experience applying risk-based prioritization using technical severity, exploitability, exposure, asset context, and business risk.
Experience partnering with cloud, application, engineering, or infrastructure teams to coordinate security remediation within GCP, AWS, or Azure cloud architectures.
Experience developing security metrics, remediation reporting, and written documentation for technical and leadership audiences.
Relevant certifications such as CISSP, CCSP, Security+, AWS Certified Security, Azure Security Engineer, or comparable credentials (preferred).