Cybersecurity Engineer III

McDonald's Restaurants Limited; Chicago (IL); On-site; USD 138,000 - 173,000; Full time

Benefits offered by this job

Health insurance

Stock options

Bonus eligibility

Job summary

McDonald’s Global Technology is seeking a Cybersecurity Engineer III – Application Security to lead secure coding practices and oversee remediation across the enterprise. You will mentor analysts and coordinate advanced testing, while ensuring robust vulnerability management.

Responsibilities include designing security programs, performing SAST/DAST testing, code reviews, and delivering executive-ready reports to leadership, helping to strengthen McDonald’s security posture.

Qualifications

• Bachelor’s degree in computer science, cybersecurity, or related field.
• 5+ years in application security or related cybersecurity roles.
• Hands-on experience with application penetration testing methodologies and tools.
• Proficiency with SAST and DAST tools and secure coding practices.
• OWASP Top 10 knowledge and secure coding principles.

Responsibilities

• Design, implement, and maintain application security processes aligned with standards.
• Lead vulnerability management across multiple platforms and coordinate remediation.
• Perform advanced testing (SAST/DAST) and conduct secure code reviews.
• Produce vulnerability reports, dashboards, and leadership-ready summaries.

Skills

Application security

Vulnerability management

Penetration testing

CI/CD pipelines

Communication skills

Team collaboration

Education

Bachelor’s degree in computer science or cybersecurity

Tools

SAST tools

DAST tools

Code review tools

Job description

Job Description:

Company Description:

McDonald’s growth strategy, Accelerating the Arches, encompasses all aspects of our business as the leading global omni-channel restaurant brand. As the consumer landscape shifts we are using our competitive advantages to further strengthen our brand. One of our core growth strategies is to Double Down on the 3Ds (Delivery, Digital and Drive Thru). McDonald’s will accelerate technology innovation so 65M+ customers a day will experience a fast, easy experience, whether at one of our 25,000 and growing Drive thrus, through McDelivery, dine-in or takeaway.

McDonald’s Global Technology is here to power tomorrow’s feel-good moments.

That’s why you’ll find us at the forefront of transformative technology, exploring new and innovative ways to serve our millions of customers and spread happiness one delicious Hot Fudge Sundae-dipped fry at a time. Using AI, robotics and emerging tech, we’re digitizing the Golden Arches. Combine that with our unparalleled global scale, and we’re reshaping all areas of the business, industry and every community that is home to a McDonald’s restaurant.We face complex tech challenges every day. But that’s where our diverse and talented teams come in. They’re made up of the best and brightest from all over the globe, and they thrive in the space where feel-good meets fast-paced.

Check out the McDonald’s Global Technology Technical Blog to learn how technology and our global team are directly enabling the Accelerating the Arches strategy.

Department Overview

McDonald’s is seeking a Cybersecurity Engineer III – Application Security to collaborate to secure coding practices efforts and ensure secure applications are being develop across the enterprise. This role expands beyond standard analyst responsibilities by providing leadership in prioritization, advanced testing, and reporting, while mentoring junior analysts and coordinating remediation activities.

McDonald’s is investing heavily in technology to drive our growth. We’re looking at how to use technology to improve customer experience and build new customer experiences. We’re also exploring technologies that can help us reduce or eliminate repetitive tasks and make employees’ jobs ultimately exciting. With all the new projects and initiatives, it is a dynamic era in our cybersecurity growth, helping to make a safer and Better McDonald's!

This position emphasizes comprehensive reporting, oversight of code reviews for security issues, and execution of advanced testing activities to validate application security posture.

Responsibilities & Accountabilities:

Application Security Program Development:

• Design, implement, and maintain application security processes aligned with organizational standards and industry best practices.

Lead Vulnerability Management:

• Oversee monitoring, tracking, and management of application security vulnerabilities across multiple platforms.

Prioritization & Risk Assessment:

• Evaluate risk and prioritize remediation efforts based on severity, business impact, and compliance requirements.

Advanced Scan & Test:

• Execute and validate SAST/DAST scans, perform manual penetration testing, and oversee complex testing scenarios.

Code Review Oversight:

• Guide and participate in code reviews to identify security vulnerabilities and enforce secure coding standards.

Reporting & Metrics:

• Prepare and deliver detailed vulnerability reports, dashboards, and executive summaries for leadership visibility.

Collaboration & Coordination:

• Work closely with developers, product teams, and cybersecurity stakeholders to communicate findings and drive remediation.

Customer Engagement:

• Act as a primary point of contact for internal teams, providing strategic guidance and actionable recommendations.

Mentorship:

• Support and mentor junior analysts in vulnerability management and testing best practices.

Continuous Improvement:

• Recommend process enhancements and automation opportunities to improve vulnerability management and testing efficiency.

Qualifications

• Education:
• Bachelor’s degree in computer science, Cybersecurity, or related field (or equivalent experience).
• Experience:
• 5+ years in application security, vulnerability management, or related cybersecurity roles.
• Hands-on experience with application penetration testing methodologies and tools.
• Proficiency with SAST and DAST tools.
• Strong understanding of secure coding practices and common vulnerabilities (OWASP Top 10).
• Skills:
• Familiarity with CI/CD pipelines and operating security tools.
• Excellent problem-solving, strong analytical and communication skills.
• Ability to work collaboratively across technical and business teams.

Preferred Qualifications

• Experience with container security and cloud-native application security.
• Certifications such as OSCP, CEH, CSSLP, CCSP.

Salary Range

The expected salary range for this role is$138,207.00 -$172,758.00per year

The above represents the expectedsalaryrange for this job requisition. Ultimately, in determining yourpay, we may also consider your experience, and other job-related factors.

Additional Information:

Benefits eligible: This position offers health and welfare benefits, including but not limited to comprehensive health insurance, which includes medical, prescription drug, mental health, dental and vision coverage, as well as, life insurance.

Bonus eligible: This position is eligible for a bonus, calculated based on individual and company performance.

Long term Incentive eligible: This position is eligible for stock or other equity grants pursuant to McDonald’s long-term incentive plan.

McDonald’s is an equal opportunity employer committed to the diversity of our workforce. We promote an inclusive work environment that creates feel-good moments for everyone. McDonald’s provides reasonable accommodations to qualified individuals with disabilities as part of the application or hiring process or to perform the essential functions of their job. If you need assistance accessing or reading this job posting or otherwise feel you need an accommodation during the application or hiring process, please contact [e-mail]. Reasonable accommodations will be determined on a case-by-case basis.

McDonald’s provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to sex, sex stereotyping, pregnancy (including pregnancy, childbirth, and medical conditions related to pregnancy, childbirth, or breastfeeding), race, color, religion, ancestry or national origin, age, disability status, medical condition, marital status, sexual orientation, gender, gender identity, gender expression, transgender status, protected military or veteran status, citizenship status, genetic information, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

Nothing in this job posting or description should be construed as an offer or guarantee of employment.