{"id":3111726,"url":"https://alion.io/job/mcdonalds-sr-manager-cyber-defense-2","title":"Sr Manager, Cyber Defense","company":{"id":678125,"name":"McDonald's","domain":"mcdonalds.com","url":"https://alion.io/company/mcdonalds-6","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":{"grade":"A","score":93,"open_postings":6,"ghost_share":0,"stale_share":0.5,"repost_share":0,"time_to_fill_p50_days":20,"computed_at":"2026-11-03T05:54:40Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Chicago, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":167366,"max":209207,"currency":"USD","period":"year","gross":null,"usd_annual":209207},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"MITRE ATT&CK","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-10-22T20:59:07Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-11-03T04:35:05Z","board_verified":true,"closed_at":null,"days_open":11,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":11},"description":"Company Description:\nMcDonald’s growth strategy, Accelerating the Arches, encompasses all aspects of our business as the leading global omni-channel restaurant brand. As the consumer landscape shifts we are using our competitive advantages to further strengthen our brand. One of our core growth strategies is to Double Down on the 3Ds (Delivery, Digital and Drive Thru). McDonald’s will accelerate technology innovation so 65M+ customers a day will experience a fast, easy experience, whether at one of our 25,000 and growing Drive thrus, through McDelivery, dine-in or takeaway.\nMcDonald’s Global Technology is here to power tomorrow’s feel-good moments.\nThat’s why you’ll find us at the forefront of transformative technology, exploring new and innovative ways to serve our millions of customers and spread happiness one delicious Hot Fudge Sundae-dipped fry at a time. Using AI, robotics and emerging tech, we’re digitizing the Golden Arches. Combine that with our unparalleled global scale, and we’re reshaping all areas of the business, industry and every community that is home to a McDonald’s restaurant. We face complex tech challenges every day. But that’s where our diverse and talented teams come in. They’re made up of the best and brightest from all over the globe, and they thrive in the space where feel-good meets fast-paced.\nCheck out the McDonald’s Global Technology Technical Blog to learn how technology and our global team are directly enabling the Accelerating the Arches strategy.\nDepartment Overview\nMcDonald’s is seeking a Senior Manager, Detection Engineering to lead the team responsible for developing, validating, and maintaining threat detections across our global technology environment.\nYou will own the detection engineering roadmap and day-to-day delivery, translating threat intelligence, incident findings, offensive security results, and business risk into prioritized engineering work. You will develop the team, establish engineering standards, and ensure detections remain effective as our technology and threat landscape evolve.\nThis role requires a technically credible people leader. You should be comfortable reviewing detection logic, investigating telemetry gaps, challenging technical assumptions, and contributing directly to complex engineering problems while enabling the team to deliver independently.\nYou will work closely with Security Operations, Incident Response, Cyber Threat Intelligence, Offensive Security, and platform owners to improve our ability to identify and investigate threats across corporate and market environments.\nResponsibilities\nLead the team and delivery\nManage and develop detection engineers through hiring, coaching, performance management, and career development.\nOwn the detection engineering roadmap, prioritized backlog, and delivery commitments. Make tradeoffs explicit when risk, capacity, and technical dependencies compete.\nEstablish clear responsibilities and working agreements with partner teams for telemetry onboarding, detection deployment, alert triage, and remediation. • Communicate detection gaps, delivery risks, and resource needs to security leadership with actionable recommendations.\nOwn the detection lifecycle\nLead the design, development, testing, deployment, tuning, and retirement of detection content across relevant security platforms.\nEstablish detection-as-code practices, including version control, peer review, automated testing, controlled deployment, and rollback.\nEnsure detections include documented behavior, required telemetry, validation evidence, known limitations, and investigation guidance.\nMaintain visibility into detection health, including failures caused by changes to data sources, schemas, configurations, or adversary behavior.\nImprove coverage and validate effectiveness\nPrioritize detection opportunities using relevant adversary techniques, threat intelligence, incident lessons, and the criticality of affected systems.\nPartner with technology owners to close telemetry gaps and improve the quality and availability of security data.\nWork with Offensive Security, Threat Intel, and Incident Response teams to validate detections through controlled testing and turn findings into engineering improvements.\nTranslate threat-hunting findings into maintained detection content and identify opportunities for automation.\nMeasure and report detection effectiveness through validated coverage, alert quality, telemetry health, and time to close priority gaps. Distinguish documented coverage from demonstrated detection capability.\nQualifications\nMinimum qualifications\nDemonstrated experience developing and operating production detections, with depth in detection engineering and relevant experience in threat hunting, incident response, or security operations.\nExperience directly managing technical security staff, including coaching, performance management, and delivery accountability.\nStrong technical judgment in detection logic, adversary behavior, and the telemetry needed to identify malicious activity.\nHands-on experience with SIEM and endpoint security platforms, detection query languages, and scripting or programming for security automation.\nExperience applying software engineering practices to security content, including version control, testing, and peer review.\nAbility to apply MITRE ATT&CK to prioritize and validate detections while recognizing the limitations of framework-based coverage measures.\nAbility to coordinate delivery across teams and explain technical gaps, risk, and tradeoffs to both technical and nontechnical stakeholders.\nBachelor’s degree in a relevant field or equivalent practical experience.\nPreferred qualifications\nExperience delivering detection capabilities in a large, distributed enterprise with multiple markets or business units.\nExperience with cloud, identity, endpoint, network, and application telemetry.\nExperience building automated detection validation and integrating adversary emulation or purple-team exercises into engineering workflows.\nExperience managing dependencies and delivery expectations with external security service providers.\nExperience evaluating analytics and AI-assisted security capabilities through measurable operational outcomes.\nCompensation\nBonus Eligible: YES\nLong - Term Incentive: YES\nBenefits Eligible: YES\nSalary Range\nThe expected salary range for this role is $167,366.00 - $209,207.00 per year\nThe above represents the expected salary range for this job requisition. Ultimately, in determining your pay, we may also consider your experience, and other job-related factors.\nAdditional Information:\nBenefits eligible: This position offers health and welfare benefits, including but not limited to comprehensive health insurance, which includes medical, prescription drug, mental health, dental and vision coverage, as well as, life insurance.\nBonus eligible: This position is eligible for a bonus, calculated based on individual and company performance.\nLong term Incentive eligible: This position is eligible for stock or other equity grants pursuant to McDonald’s long-term incentive plan.\nMcDonald’s is an equal opportunity employer. We promote an inclusive work environment that creates feel-good moments for everyone. McDonald’s provides reasonable accommodations to qualified individuals with disabilities as part of the application or hiring process or to perform the essential functions of their job. If you need assistance accessing or reading this job posting or otherwise feel you need an accommodation during the application or hiring process, please contact . Reasonable accommodations will be determined on a case-by-case basis.\nMcDonald’s provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to sex, sex stereotyping, pregnancy (including pregnancy, childbirth, and medical conditions related to pregnancy, childbirth, or breastfeeding), race, color, religion, ancestry or national origin, age, disability status, medical condition, marital status, sexual orientation, gender, gender identity, gender expression, transgender status, protected military or veteran status, citizenship status, genetic information, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.\nNothing in this job posting or description should be construed as an offer or guarantee of employment.","description_format":"text","description_chars":8654,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":["Equity","Health insurance","Life insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","C4ISR","Food & Beverages","Catering & Food Services"],"lifecycle":[{"event":"open","at":"2026-10-22T20:59:07Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 78 · green card filings: 12","filings_12m":78,"filings_prev_12m":53,"green_card_filings_12m":12,"median_offered_wage_usd":162333,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":4}],"liveness":{"score":81,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":0.9,"age_days":11,"expected_fill_days":20,"reasons":["conf:1","velocity","win:mid","comp:brand"],"computed_at":"2026-11-03T05:54:40Z"},"pay":{"stated_usd_annual":209207,"is_top_pay":true},"html_url":"https://alion.io/job/mcdonalds-sr-manager-cyber-defense-2","json_url":"https://alion.io/job/mcdonalds-sr-manager-cyber-defense-2.json","meta":{"generated_at":"2026-11-03T13:18:02Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18323,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":678125},"rest":"https://alion.io/mcp/rest/get_company?id=678125"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmcdonalds-sr-manager-cyber-defense-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmcdonalds-sr-manager-cyber-defense-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmcdonalds-sr-manager-cyber-defense-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/mcdonalds-sr-manager-cyber-defense-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmcdonalds-sr-manager-cyber-defense-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3111726}},{"tool":"search_jobs","arguments":{"company":"mcdonalds.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3111726},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}