Analyst, Cyber Defense
About The Position
As a Detection & Response Analyst within McDonald’s 24/7 Global Security Operations Center (GSOC), you will use defensive measures and information from various sources to identify, analyze, and report cybersecurity events and protect McDonald’s information assets. You will support incident response, respond to crisis situations, and help mitigate immediate and potential cyber threats. The role is part of Global Cyber Security (GCS), which is responsible for the Cyber Defense & Incident Response program and critical services that inform leadership risk decisions. You will collaborate with Incident Response and Cyber Defense teams, market stakeholders, and the SOC on operational work and longer-term efforts to strengthen McDonald’s security posture. The role requires cybersecurity expertise in security operations, event monitoring, threat analysis, and incident handling.
Requirements
- Bachelor’s degree or equivalent experience in Computer Science, Cybersecurity, Information Technology, Software Engineering, Information Systems, or Computer Engineering.
- At least 2 years of experience working in a security operations or incident response role.
- Solid understanding of cybersecurity practices, cloud technologies, detection and response frameworks, and incident handling procedures, including containment, eradication, recovery, and lessons learned.
- Ability to follow established incident response playbooks and practices.
- Proficiency in computer networking concepts, protocols, and network security methodologies.
- Strong ability to analyze cyber threats and vulnerabilities.
- Competence in authentication, authorization, and access control methods.
- Proficiency in intrusion detection methodologies and techniques for detecting host- and network-based intrusions.
- In-depth knowledge of system and application security threats and vulnerabilities.
- Advanced understanding of network attacks and their relationship to threats and vulnerabilities.
- Proficiency in adversarial tactics, techniques, and procedures.
- Comprehensive knowledge of the stages of a cyber attack.
- Proficiency with Windows, macOS, and/or Linux operating systems.
- Strong attention to detail and ability to work collaboratively across global, cross-functional teams.
Nice To Haves
- Professional certification such as GIAC, GCIH, or GCIA.
- Experience working from incident response playbooks.
- Experience with case management tools, SOAR, email security solutions, SIEM, and EDR technologies.
- Experience with network and data analysis, packet capture analysis, malware detection, custom intrusion signature development, and advanced information assurance.
- Experience developing automation using scripting languages such as Python.
Responsibilities
- Continuously monitor and analyze system activity using security operations tools to identify malicious activity.
- Characterize and analyze network traffic and logs to identify potential threats to McDonald’s assets.
- Analyze enterprise network alerts to determine their root cause.
- Detect, identify, and analyze possible attacks and intrusions in a timely manner, distinguishing them from benign activity.
- Collaborate with the Incident Response team, market stakeholders, and SOC to validate security events and provide tuning input.
- Perform event correlation to gain situational awareness and assess the effectiveness of observed attacks.
- Conduct security operations and incident response trend analysis and reporting.
- Assist in constructing signatures for defensive network tools in response to new or observed threats.
- Assist with eDiscovery and forensic investigations.
- Monitor external data sources to stay informed about cyber defense threat conditions.
- Offer cybersecurity recommendations to leadership based on significant threats and vulnerabilities.
- Collaborate with stakeholders to resolve computer security incidents and ensure vulnerability compliance.
Benefits
- Comprehensive health insurance, including medical, prescription drug, mental health, dental, and vision coverage.
- Life insurance.
- Eligibility for a bonus based on individual and company performance.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
