You will serve as a frontline technical authority safeguarding McKinsey’s global digital ecosystem.
You will actively shrink the firm’s attack surface across on-premises, cloud, AI, and endpoint environments by translating complex cyber telemetry into actionable business defense.
Operating with high autonomy within the Product & Platform Security group, you will drive qwn the lifecycle of our vulnerability management platforms—optimizing scan coverage, fine-tuning configurations, and integrating systems across cloud infrastructure, containers, and modern AI workloads.
You will synthesize threat intelligence and vulnerability data using frameworks such as NIST, MITRE ATT&CK, and the Cyber Kill Chain to contextualize residual risk, prioritize remediation, and advise business stakeholders.
You will be involved in architect automation & tooling design and build resilient API integrations and automations that streamline asset inventory, vulnerability prioritization, and operational efficiency.
You will partner globally with engineering, product leads, and offensive security teams (Red Team, Threat Intel, Pen Testing) to embed security-by-design into everyday system delivery.
You will have the opportunity to work in advanced agile security workflows, and mentor emerging talent across our distributed team spanning Prague, Gurgaon, and San José.