{"id":2902745,"url":"https://alion.io/job/mcdonalds-endpoint-detection-and-response-engineer-iii","title":"Endpoint Detection and Response Engineer III","company":{"id":678125,"name":"McDonald's","domain":"mcdonalds.com","url":"https://alion.io/company/mcdonalds-6","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chicago, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":138207,"max":172758,"currency":"USD","period":"year","gross":null,"usd_annual":172758},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Linux","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Windows","optional":false},{"name":"Agile","optional":true},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"GCP","optional":true},{"name":"GraphQL","optional":true},{"name":"ITIL","optional":true},{"name":"Power BI","optional":true},{"name":"Red Teaming","optional":true},{"name":"Rest API","optional":true},{"name":"ServiceNow","optional":true},{"name":"Tableau","optional":true}],"status":"live","first_seen_at":"2026-10-09T00:00:00Z","employer_posted_date":"2026-10-09","last_verified_at":"2026-10-22T12:18:04Z","board_verified":true,"closed_at":null,"days_open":13,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":13},"description":"Company Description:\nMcDonald’s is proud to be one of the most recognized brands in the world, with restaurants in over 100 countries that serve 70 million customers daily. We continue to operate from a position of strength. Our updated growth strategy is focused on staying ahead of what our customers want and realizing further growth potential. Our relentless ambition is why McDonald’s remains one of the world’s leading corporations after almost 70 years. Joining McDonald's means thinking big and preparing for a career that can have influence around the world.\nAt McDonald’s, we see every day as a chance to create positive impact. We lead through our values centered on inclusivity, service, integrity, community and family. From support of Ronald McDonald House to our Youth Opportunity project and sustainability initiatives, our values keep us dedicated to using our scale for good: good for our customers, people, industry and planet. We also offer a broad range of outstanding benefits including a sabbatical program, tuition assistance and flexible work arrangements.\nDepartment Overview\nWe are seeking an experienced Engineer III to join our Cybersecurity Endpoint Protection team, focused on building and sustaining enterprise-grade endpoint protection capabilities at global scale. This role emphasizes engineering rigor, platform reliability, and thoughtful implementation of endpoint security controls that reduce risk while enabling business operations. The Engineer III collaborates closely with Detection Engineering and other cybersecurity and technology teams to ensure endpoint controls generate high-fidelity telemetry and integrate effectively into detection and response workflows. This role contributes hands-on expertise, continuous improvement, and durable solutions across McDonald’s endpoint ecosystem.\nDuties\nEngineer, configure, and operate endpoint protection platforms and controls in alignment with established standards and architectures. \nAssist in the continuous improvement and operational stability of endpoint protection services. \nCollaborate closely with Detection Engineering to ensure endpoint telemetry supports high-quality detection use cases. \nImplement preventative and hardening controls that reduce endpoint risk while maintaining business usability. \nContribute technical input into design discussions and improvement initiatives \nDevelop and maintain automation, scripts, and tooling to improve consistency and operational efficiency. \nTroubleshoot complex endpoint protection issues and provide advanced technical support when escalated. \nMaintain technical documentation, runbooks, and standard operating procedures related to endpoint protection controls. \nStay informed of emerging endpoint threats, trends, and technologies and share insights with the team. \nQualifications\n5+ years of experience in cybersecurity with a strong focus on endpoint protection engineering or operations. \nHands-on experience with enterprise endpoint protection or EDR/XDR platforms.\nStrong knowledge of Windows, macOS, and/or Linux endpoint operating systems. \nExperience implementing and operating security controls at enterprise scale. \nProficiency in scripting or automation using tools such as PowerShell or Python. \nSolid understanding of cybersecurity frameworks and models such as NIST, CIS Controls, and MITRE ATT&CK. \nExperience and ability to participate in a 24x7x365 team. \nAnalyze sophisticated issues, detail their impact on the business, resolve their root causes, and identify corrective actions to prevent similar future events. \nSuper interpersonal skills, able to correspond with collaborators promptly and with attention to detail, vitality, and thoroughness to all levels of the organization. \nExperience handling third-party vendors and service providers. \nPreferred Qualifications\n5+ years of experience designing, implementing, and operating enterprise scale endpoint protection and app control products across diverse global environments and operating systems.\nDemonstrated experience securing nontraditional and emerging endpoint platforms, including IoT devices, cloud hosted workloads, virtual machines, and containerized environments across major cloud providers (AWS, Azure, Google Cloud, OCI). \nExperience supporting or enabling blue, purple, or red team activities through endpoint control engineering, telemetry improvements, and detection enablement. \nAdvanced proficiency in scripting and automation (e.g., Python, PowerShell) to operationalize controls, improve reliability, and reduce manual effort through engineering led solutions. \nStrong experience integrating and extending security platforms via APIs, including REST and GraphQL, to enable automation, reporting, and ecosystem interoperability. \nProven ability to integrate endpoint protection platforms with IT Service Management systems (e.g., ServiceNow) to support operational workflows and escalation paths. \nExperience leveraging data analysis and visualization tools (e.g., PowerBI, Tableau) to analyze endpoint trends, surface risk signals, and communicate technical insights effectively. \nWorking knowledge of the ITIL operating model, with an understanding of how endpoint protection engineering supports broader service operations. \nExperience operating within Agile delivery models, contributing engineering work through iterative planning and execution. \nProfessional certifications such as CISSP, CISM, ITIL, or equivalent advanced security or engineering credentials. \nSalary Range\nThe expected salary range for this role is $138,207.00 - $172,758.00 USD per year\nThe above represents the expected salary range for this job requisition. Ultimately, in determining your pay, we may also consider your experience, and other job-related factors.\nAdditional Information:\nBenefits eligible: This position offers health and welfare benefits, including but not limited to comprehensive health insurance, which includes medical, prescription drug, mental health, dental and vision coverage, as well as, life insurance.\nBonus eligible: This position is eligible for a bonus, calculated based on individual and company performance.\nLong term Incentive eligible: This position is eligible for stock or other equity grants pursuant to McDonald’s long-term incentive plan.\nMcDonald’s is an equal opportunity employer. We promote an inclusive work environment that creates feel-good moments for everyone. McDonald’s provides reasonable accommodations to qualified individuals with disabilities as part of the application or hiring process or to perform the essential functions of their job. If you need assistance accessing or reading this job posting or otherwise feel you need an accommodation during the application or hiring process, please contact . Reasonable accommodations will be determined on a case-by-case basis.\nMcDonald’s provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to sex, sex stereotyping, pregnancy (including pregnancy, childbirth, and medical conditions related to pregnancy, childbirth, or breastfeeding), race, color, religion, ancestry or national origin, age, disability status, medical condition, marital status, sexual orientation, gender, gender identity, gender expression, transgender status, protected military or veteran status, citizenship status, genetic information, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.\nNothing in this job posting or description should be construed as an offer or guarantee of employment.","description_format":"text","description_chars":7847,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"phd","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Flexible schedule","Health insurance","Life insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Endpoint Security","Catering & Food Services"],"lifecycle":[{"event":"open","at":"2026-10-20T06:58:19Z"}],"visa":[],"liveness":{"score":75,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.834,"p_room":0.9,"age_days":13,"expected_fill_days":20,"reasons":["conf:2","velocity","win:mid","comp:brand"],"computed_at":"2026-10-22T06:10:10Z"},"pay":{"stated_usd_annual":172758,"is_top_pay":true},"html_url":"https://alion.io/job/mcdonalds-endpoint-detection-and-response-engineer-iii","json_url":"https://alion.io/job/mcdonalds-endpoint-detection-and-response-engineer-iii.json","meta":{"generated_at":"2026-10-22T15:44:30Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":23452,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":678125},"rest":"https://alion.io/mcp/rest/get_company?id=678125"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmcdonalds-endpoint-detection-and-response-engineer-iii"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmcdonalds-endpoint-detection-and-response-engineer-iii"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmcdonalds-endpoint-detection-and-response-engineer-iii"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/mcdonalds-endpoint-detection-and-response-engineer-iii\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmcdonalds-endpoint-detection-and-response-engineer-iii"}]}