Cybersecurity Engineer III

McDonald's Corporation•Chicago, IL

6d•$138,207 - $172,758

About The Position

We are seeking an experienced Engineer III to join our Cybersecurity Endpoint Protection team, focused on building and sustaining enterprise‑grade endpoint protection capabilities at global scale. This role emphasizes engineering rigor, platform reliability, and thoughtful implementation of endpoint security controls that reduce risk while enabling business operations. The Engineer III collaborates closely with Detection Engineering and other cybersecurity and technology teams to ensure endpoint controls generate high‑fidelity telemetry and integrate effectively into detection and response workflows. This role contributes hands‑on expertise, continuous improvement, and durable solutions across McDonald’s endpoint ecosystem.

Requirements

5+ years of experience in cybersecurity with a strong focus on endpoint protection engineering or operations.
Hands-on experience with enterprise endpoint protection or EDR/XDR platforms.
Strong knowledge of Windows, macOS, and/or Linux endpoint operating systems.
Experience implementing and operating security controls at enterprise scale.
Proficiency in scripting or automation using tools such as PowerShell or Python.
Solid understanding of cybersecurity frameworks and models such as NIST, CIS Controls, and MITRE ATT&CK.
Ability to work effectively both independently and as part of cross-functional teams.
Strong analytical, troubleshooting, and communication skills.
Experience and ability to participate in a 24x7x365 team.
Analyze sophisticated issues, detail their impact on the business, resolve their root causes, and identify corrective actions to prevent similar future events.
Superb interpersonal skills, able to correspond with collaborators promptly and with attention to detail, vitality, and thoroughness to all levels of the organization.
Self-starter who learns quickly on the job with minimal training.
Forward thinking with solid business acumen.
Exhibits excellent time management and interpersonal skills.
Exhibits a high level of integrity, trustworthiness, and confidence, representing the organization and its management team at the highest level of professionalism.
Experience handling third-party vendors and service providers.

Nice To Haves

7+ years of experience designing, implementing, and operating enterprise scale endpoint protection and app control products across diverse global environments and operating systems.
Demonstrated experience securing nontraditional and emerging endpoint platforms, including IoT devices, cloud hosted workloads, virtual machines, and containerized environments across major cloud providers (AWS, Azure, Google Cloud, OCI).
Experience supporting or enabling blue, purple, or red team activities through endpoint control engineering, telemetry improvements, and detection enablement.
Advanced proficiency in scripting and automation (e.g., Python, PowerShell) to operationalize controls, improve reliability, and reduce manual effort through engineering led solutions.

Responsibilities

Engineer, configure, and operate endpoint protection platforms and controls in alignment with established standards and architectures.
Assist in the continuous improvement and operational stability of endpoint protection services.
Collaborate closely with Detection Engineering to ensure endpoint telemetry supports high-quality detection use cases.
Implement preventative and hardening controls that reduce endpoint risk while maintaining business usability.
Contribute technical input into design discussions and improvement initiatives
Develop and maintain automation, scripts, and tooling to improve consistency and operational efficiency.
Troubleshoot complex endpoint protection issues and provide advanced technical support when escalated.
Maintain technical documentation, runbooks, and standard operating procedures related to endpoint protection controls.
Stay informed of emerging endpoint threats, trends, and technologies and share insights with the team.