Endpoint Detection and Response Engineer III

Company Description:

McDonald’s is proud to be one of the most recognized brands in the world, with restaurants in over 100 countries that serve 70 million customers daily. We continue to operate from a position of strength. Our updated growth strategy is focused on staying ahead of what our customers want and realizing further growth potential. Our relentless ambition is why McDonald’s remains one of the world’s leading corporations after almost 70 years. Joining McDonald's means thinking big and preparing for a career that can have influence around the world.

At McDonald’s, we see every day as a chance to create positive impact. We lead through our values centered on inclusivity, service, integrity, community and family. From support of Ronald McDonald House to our Youth Opportunity project and sustainability initiatives, our values keep us dedicated to using our scale for good: good for our customers, people, industry and planet. We also offer a broad range of outstanding benefits including a sabbatical program, tuition assistance and flexible work arrangements.

Department Overview

We are seeking an experienced Engineer III to join our Cybersecurity Endpoint Protection team, focused on building and sustaining enterprise-grade endpoint protection capabilities at global scale. This role emphasizes engineering rigor, platform reliability, and thoughtful implementation of endpoint security controls that reduce risk while enabling business operations. The Engineer III collaborates closely with Detection Engineering and other cybersecurity and technology teams to ensure endpoint controls generate high-fidelity telemetry and integrate effectively into detection and response workflows. This role contributes hands-on expertise, continuous improvement, and durable solutions across McDonald’s endpoint ecosystem.

Duties

• Engineer, configure, and operate endpoint protection platforms and controls in alignment with established standards and architectures.
• Assist in the continuous improvement and operational stability of endpoint protection services.
• Collaborate closely with Detection Engineering to ensure endpoint telemetry supports high-quality detection use cases.
• Implement preventative and hardening controls that reduce endpoint risk while maintaining business usability.
• Contribute technical input into design discussions and improvement initiatives
• Develop and maintain automation, scripts, and tooling to improve consistency and operational efficiency.
• Troubleshoot complex endpoint protection issues and provide advanced technical support when escalated.
• Maintain technical documentation, runbooks, and standard operating procedures related to endpoint protection controls.
• Stay informed of emerging endpoint threats, trends, and technologies and share insights with the team.

Qualifications

• 5+ years of experience in cybersecurity with a strong focus on endpoint protection engineering or operations.
• Hands-on experience with enterprise endpoint protection or EDR/XDR platforms.
• Strong knowledge of Windows, macOS, and/or Linux endpoint operating systems.
• Experience implementing and operating security controls at enterprise scale.
• Proficiency in scripting or automation using tools such as PowerShell or Python.
• Solid understanding of cybersecurity frameworks and models such as NIST, CIS Controls, and MITRE ATT&CK.
• Experience and ability to participate in a 24x7x365 team.
• Analyze sophisticated issues, detail their impact on the business, resolve their root causes, and identify corrective actions to prevent similar future events.
• Super interpersonal skills, able to correspond with collaborators promptly and with attention to detail, vitality, and thoroughness to all levels of the organization.
• Experience handling third-party vendors and service providers.

Preferred Qualifications

• 5+ years of experience designing, implementing, and operating enterprise scale endpoint protection and app control products across diverse global environments and operating systems.
• Demonstrated experience securing nontraditional and emerging endpoint platforms, including IoT devices, cloud hosted workloads, virtual machines, and containerized environments across major cloud providers (AWS, Azure, Google Cloud, OCI).
• Experience supporting or enabling blue, purple, or red team activities through endpoint control engineering, telemetry improvements, and detection enablement.
• Advanced proficiency in scripting and automation (e.g., Python, PowerShell) to operationalize controls, improve reliability, and reduce manual effort through engineering led solutions.
• Strong experience integrating and extending security platforms via APIs, including REST and GraphQL, to enable automation, reporting, and ecosystem interoperability.
• Proven ability to integrate endpoint protection platforms with IT Service Management systems (e.g., ServiceNow) to support operational workflows and escalation paths.
• Experience leveraging data analysis and visualization tools (e.g., PowerBI, Tableau) to analyze endpoint trends, surface risk signals, and communicate technical insights effectively.
• Working knowledge of the ITIL operating model, with an understanding of how endpoint protection engineering supports broader service operations.
• Experience operating within Agile delivery models, contributing engineering work through iterative planning and execution.
• Professional certifications such as CISSP, CISM, ITIL, or equivalent advanced security or engineering credentials.

Salary Range

The expected salary range for this role is $138,207.00 - $172,758.00 USD per year

The above represents the expected salary range for this job requisition. Ultimately, in determining your pay, we may also consider your experience, and other job-related factors.

Additional Information:

Benefits eligible: This position offers health and welfare benefits, including but not limited to comprehensive health insurance, which includes medical, prescription drug, mental health, dental and vision coverage, as well as, life insurance.

Bonus eligible: This position is eligible for a bonus, calculated based on individual and company performance.

Long term Incentive eligible: This position is eligible for stock or other equity grants pursuant to McDonald’s long-term incentive plan.

McDonald’s is an equal opportunity employer. We promote an inclusive work environment that creates feel-good moments for everyone. McDonald’s provides reasonable accommodations to qualified individuals with disabilities as part of the application or hiring process or to perform the essential functions of their job. If you need assistance accessing or reading this job posting or otherwise feel you need an accommodation during the application or hiring process, please contact [email protected]. Reasonable accommodations will be determined on a case-by-case basis.

McDonald’s provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to sex, sex stereotyping, pregnancy (including pregnancy, childbirth, and medical conditions related to pregnancy, childbirth, or breastfeeding), race, color, religion, ancestry or national origin, age, disability status, medical condition, marital status, sexual orientation, gender, gender identity, gender expression, transgender status, protected military or veteran status, citizenship status, genetic information, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Nothing in this job posting or description should be construed as an offer or guarantee of employment.