Sr. Associate Cloud Security Engineer (P2)

About the Role

As a Sr. Associate Cloud Security Engineer, you will help protect McKesson’s technology environment by implementing and maintaining security controls across cloud, hybrid, and on-premises platforms. Working as part of the Cybersecurity Engineering team, you will support secure infrastructure design, monitor security risks, and contribute to remediation and compliance activities that strengthen the organisation’s overall security posture. This role partners closely with infrastructure, network, cloud, and application teams to ensure security is embedded into technology decisions and daily operations. You will work under moderate guidance while building technical expertise and contributing to the continuous improvement of enterprise security capabilities.

What You’ll Do (Responsibilities)

• Implement and maintain security controls and configurations across cloud, network, and infrastructure environments, ensuring alignment with enterprise security standards.
• Analyse security alerts, investigate suspicious activity, and support incident response activities using enterprise security monitoring and telemetry tools.
• Assist with vulnerability management by validating findings, coordinating remediation efforts, and tracking issues through resolution.
• Review network access requests and connectivity requirements, ensuring access is appropriate, secure, and aligned with least-privilege principles.
• Evaluate network traffic, protocols, and communication flows to identify security risks and support secure network design.
• Support compliance, audit, and risk assessment activities by preparing evidence, reviewing control effectiveness, and identifying areas for improvement.
• Collaborate with cross-functional teams and technology partners to embed security requirements into system deployments, infrastructure changes, and cloud initiatives.

Basic Requirements

• Minimum Education & Typical Experience or Equivalent Combination: Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field, with 2+ years of relevant experience in cybersecurity, network security, cloud security, infrastructure, or security operations.
• 2+ years of experience supporting cybersecurity, network security, IT infrastructure, or cloud technology environments.
• Strong knowledge of TCP/IP networking, routing, switching, DNS, HTTP, and enterprise network communications.
• Experience working with network security technologies such as firewalls, intrusion detection systems (IDS), intrusion prevention systems (IPS), VPNs, or network segmentation controls.
• Experience reviewing, governing, or supporting network access management within enterprise environments.
• Knowledge of security concepts including identity and access management, least privilege, vulnerability management, configuration hardening, and incident response.
• Experience supporting cloud or hybrid infrastructure environments and applying security controls within those environments.
• Basic scripting or programming experience for automation, integration, or operational efficiency initiatives.
• Familiarity with Windows and Linux operating systems in an enterprise environment.

Preferred Skills / Experience

• Exposure to Zero Trust security architectures and modern cloud networking concepts.
• Experience with cloud security platforms, policy-as-code practices, or security automation technologies.
• Strong communication skills with the ability to explain technical security concepts to both technical and non-technical stakeholders.