{"id":2902683,"url":"https://alion.io/job/mcdonalds-sr-manager-cyber-defense","title":"Sr Manager, Cyber Defense","company":{"id":678125,"name":"McDonald's","domain":"mcdonalds.com","url":"https://alion.io/company/mcdonalds-6","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":85000,"max_usd":156000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":36},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":true},{"name":"Crowdstrike","optional":true},{"name":"Google SecOps","optional":true},{"name":"Incident Management","optional":true},{"name":"SentinelOne","optional":true},{"name":"SIEM","optional":true}],"status":"live","first_seen_at":"2026-10-17T07:00:00Z","employer_posted_date":"2026-10-17","last_verified_at":"2026-10-22T07:42:48Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"Company Description\nMcDonald’s is proud to be one of the most recognized brands in the world, with restaurants in over 100 countries that serve 70 million customers daily. As the global leader in the food service industry, our legacy of innovation and hard work continues to drive us.\nFrom drive thru updates to delivery to mobile order and pay, we are innovating quickly and growing. Joining McDonald's means thinking big and preparing for a career that can have influence around the world.\nDepartment Overview\nMcDonald’s new growth strategy, Accelerating the Arches, encompasses all aspects of our business as the leading global omnichannel restaurant brand. As the consumer landscape shifts, we are using our competitive advantages to strengthen our brand further. One of our core growth strategies is to Double Down on the 3Ds (Delivery, Digital, and Drive Thru). McDonald’s will accelerate technology innovation so 65M+ customers a day will experience a fast, easy experience, whether at one of our 25,000 and growing Drive-Thrus, through McDelivery, dine-in, or takeaway.\nMcDonald’s Global Technology organization is leading this tech revolution, comprised of intrapreneurs who get to build cool tech with scary intelligent people using the latest innovations like AI, IoT, and edge computing. We do this by working with diverse, global teams who are always hungry for a challenge. It’s bonus points when you see your family and friends use the tech you build at their favorite McD restaurant.\nAs we have matured as an engineering organization and seen the demands for technology grow exponentially, we’re gearing up to deliver on the next set of opportunities for the business. We are building up an in-house engineering team accountable for our strategic products, working alongside diverse squads of internal engineers and partners to solve technology innovation challenges at an incredible scale.\nDuties\n Security Operations & Service Delivery (UK / EMEA)Lead the UK-based SOC team delivering monitoring, triage, investigation, and escalation across the EMEA timezone within the follow-the-sun GSOC model, owning the UK shift and ensuring clean handovers with the US and India locations.\nManage the end-to-end lifecycle of EMEA security events - from detection through investigation and escalation to Incident Response (CIRT) to closure - in line with defined SLOs and KPIs, coordinating with market security and technology teams.\n\nDetection & Response OperationsIdentify and investigate intrusions and drive effective response using SIEM, SOAR, EDR/XDR, and email security solutions, supporting threat hunting and developing remediation plans across EMEA markets.\nProvide detection tuning and feedback loops to Detection Engineering and managed providers, and coordinate with CIRT and Cyber Threat Intelligence on handoffs and IOC enrichment.\n\nPeople Leadership & Team DevelopmentLead, mentor, and develop the UK team of analysts - managing shift scheduling, capacity, and performance while providing hands-on technical guidance to mature their tradecraft and response capabilities.\n\n Metrics, Reporting & Program MaturityBe accountable for UK SOC metrics (MTTD, MTTR, MTTC, case backlog) and translate operational data into executive-ready narratives, driving continuous improvement of the SOC.\n\nQualifications\nBachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent professional experience.\n6+ years of experience in cybersecurity operations, security monitoring, detection and response, or IT security incident management.\nDemonstrated experience leading or supervising SOC teams, including direct people management, coaching, and performance management.\nDeep technical understanding of SIEM platforms, SOAR orchestration, EDR/XDR solutions, log management, and security event investigation workflows.\nExpert-level understanding of security monitoring, alert triage methodologies, incident escalation frameworks, and the cyber kill chain.\nIn-depth understanding and practical application of the NIST Cybersecurity Framework.\nStrong experience working with a SOC/NOC and coordinating with legal and market operations during incidents.\nStrong communication and stakeholder management skills, with the ability to translate operational data and security events into business risk language.\nProven ability to operate under pressure, manage competing priorities, and lead teams through high-stress incident response situations.\nWillingness and ability to work non-standard hours, including nights, weekends, and holidays, in support of active incident response and global SOC coverage requirements.\nProfessional certifications such as CISSP, CISM, GCIH, GCIA, GCFA, GREM, OSCP, or equivalent.\nExperience with Google SecOps/Azure Sentinel, Defender/SentinelOne/CrowdStrike, or comparable SIEM/EDR platforms at enterprise scale.\nOutstanding technical writing skills and the ability to communicate to diverse audiences.\nAdditional information\nAt McDonalds we are People from all Walks of Life...\nPeople are at the heart of everything we do, and they make the McDonalds experience. We embrace diversity and are committed to creating an inclusive culture that means people can be their best authentic self in our restaurants and offices, which helps us to better serve our customers. We have a strong heritage of diversity and representation within our communities, which we are proud of. The diversity of our people, customers, Franchisees, and suppliers gives us strength.\nWe do not tolerate inequality, injustice, or discrimination of any kind. These are hugely important issues and a brand with our reach and relevance means we have a very meaningful role to play.\nWe also recognise our responsibility as a large employer to continue being active in our communities, helping to develop skills and drive aspirations that will help people to be more aware of the world of work and more successful within it, whether with McDonalds or elsewhere.","description_format":"text","description_chars":5985,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","C4ISR","Catering & Food Services","Incident Response"],"lifecycle":[{"event":"open","at":"2026-10-20T06:58:19Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":4,"expected_fill_days":20,"reasons":["conf:2","velocity","win:early","comp:brand"],"computed_at":"2026-10-22T06:10:10Z"},"pay":null,"html_url":"https://alion.io/job/mcdonalds-sr-manager-cyber-defense","json_url":"https://alion.io/job/mcdonalds-sr-manager-cyber-defense.json","meta":{"generated_at":"2026-10-22T10:58:26Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8543,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-23T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":678125},"rest":"https://alion.io/mcp/rest/get_company?id=678125"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmcdonalds-sr-manager-cyber-defense"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmcdonalds-sr-manager-cyber-defense"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmcdonalds-sr-manager-cyber-defense"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/mcdonalds-sr-manager-cyber-defense\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmcdonalds-sr-manager-cyber-defense"}]}