Graduate Cyber Security Analyst (Cyber Academy)

About the Role

McKesson’s Cyber Academy is a structured 24-month rotational development program designed for early-career cybersecurity professionals. This role is ideal for recent graduates seeking experience in security operations, threat detection, vulnerability management, risk assessment, incident response, and security engineering.

Key Responsibilities

• Monitor and investigate security alerts, events, and indicators of compromise.
• Support threat detection, vulnerability management, and risk reduction activities.
• Assist with incident response investigations, documentation, and remediation efforts.
• Use cybersecurity tools and technologies to identify, analyze, and help prevent security threats.
• Collaborate with technology, engineering, and application teams to strengthen security controls.
• Support Identity and Access Management (IAM) processes and access governance activities.
• Contribute to DevSecOps initiatives by integrating security best practices into SDLC and CI/CD pipelines.
• Participate in Cyber Academy rotations, structured learning programs, mentorship opportunities, and cybersecurity projects.

Requirements & Tech Stack

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Information Systems, or a related discipline completed within the past 12 months.
• Basic understanding of cybersecurity threats, vulnerabilities, risk management, and security principles.
• Proficiency in scripting using Python, Bash, or JavaScript for automation, data analysis, or problem solving.
• Foundational knowledge of networking and system concepts, including TCP/IP, operating systems, authentication, and access controls.
• Strong analytical, troubleshooting, and problem-solving skills.
• Effective written and verbal communication skills.
• Ability to work onsite 2–3 days per week at an assigned McKesson location.

Qualifications

• 0–2 years of experience in cybersecurity, information security, IT, software engineering, networking, or a related technical field.
• Internship, co-op, research, lab, project, or hands-on experience in cybersecurity or information technology.
• Familiarity with cybersecurity frameworks, security operations, SIEM platforms, or threat monitoring tools.
• Knowledge of cloud security, DevSecOps, secure software development, or infrastructure security concepts.
• Exposure to vulnerability management, security assessments, or compliance programs.
• Experience working in collaborative, cross-functional team environments.
• CompTIA Security+, Network+, SSCP, or equivalent cybersecurity certification.
• Interest in healthcare technology and healthcare cybersecurity.
• Demonstrated commitment to continuous learning and professional development.