Lead Penetration Tester & Red Team Architect

McDonald's Corporation; Chicago (IL); On-site; USD 167,000 - 209,000; Full time

Benefits offered by this job

Bonus Eligible

Long Term Incentive

Benefits Eligible

Job summary

McDonald’s Corporation is seeking a Lead Analyst, Cyber Defense – Penetration Testing to drive proactive vulnerability discovery across global assets. The role requires advanced offensive security expertise to lead application, cloud, and network assessments and emulate threat actors across enterprise environments.

The ideal candidate will coordinate with stakeholders worldwide, create technical reports, and develop scripts for concepts and automation while mentoring the team and guiding purple

Qualifications

• Bachelor's degree or equivalent technical experience in offensive/defensive cybersecurity roles.
• 5-8 years of experience in technical offensive cybersecurity roles (e.g. ethical hacking, penetration testing, etc.).
• Understanding the purpose and utilization of frameworks, such as MITRE ATT&CK and the Cyber Kill Chain.
• Excellent written and verbal communication/presentation skills to effectively describe assessment details and technical analysis.

Responsibilities

• Plan and lead red team adversary emulation exercises across the enterprise.
• Lead application, network, cloud, and mobile application assessments.
• Identify vulnerabilities and exposure within enterprise networks, systems, and applications by leading offensive security engagements.
• Produce scripts for proof-of-concepts and automations.
• Regularly update management and stakeholders on project progress.

Skills

Penetration testing

Offensive security

Cloud security

Networking

Python/PowerShell

Education

Bachelor's degree or equivalent in cybersecurity

Tools

MITRE ATTACK

Cyber Kill Chain

C2

BAS

EASM

Job description

McDonald’s Corporation is seeking a Lead Analyst, Cyber Defense – Penetration Testing to drive proactive vulnerability discovery across global assets. The role requires advanced offensive security expertise to lead application, cloud, and network assessments and emulate threat actors across enterprise environments.

The ideal candidate will coordinate with stakeholders worldwide, create technical reports, and develop scripts for concepts and automation while mentoring the team and guiding purple