Sr Analyst Cyber Defense (Detection Engineering) [T500-16020]

About McDonald’s:

One of the world’s largest employers with locations in more than 100 countries, McDonald’s Corporation has corporate opportunities in Hyderabad. Our global offices serve as dynamic innovation and operations hubs, designed to expand McDonald's global talent base and in-house expertise. Our new office in Hyderabad will bring together knowledge across business, technology, analytics, and AI, accelerating our ability to deliver impactful solutions for the business and our customers across the globe.

McDonald’s is committed to providing qualified individuals with disabilities with reasonable accommodations to perform the essential functions of their jobs. McDonald’s provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to sex, sex stereotyping, pregnancy (including pregnancy, childbirth, and medical conditions related to pregnancy, childbirth, or breastfeeding), race, color, religion, ancestry or national origin, age, disability status, medical condition, marital status, sexual orientation, gender, gender identity, gender expression, transgender status, protected military or veteran status, citizenship status, genetic information, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.

McDonald’s Capability Center India Private Limited (“McDonald’s in India”) is a proud equal opportunity employer and is committed to hiring a diverse workforce and sustaining an inclusive culture. At McDonald’s in India, employment decisions are based on merit, job requirements, and business needs, and all qualified candidates are considered for employment. McDonald’s in India does not discriminate based on race, religion, colour, age, gender, marital status, nationality, ethnic origin, sexual orientation, political affiliation, veteran status, disability status, medical history, parental status, genetic information, or any other basis protected under state or local laws.

Nothing in this job posting or description should be construed as an offer or guarantee of employment.

Position Summary:

Senior Detection Engineer

Who we are looking for:

We are seeking a Senior Detection Engineer who will support in building out and improving McDonald’s ability to effectively detect and respond to threats. You will collaborate closely with cybersecurity experts, Global Technology teams, service partners, and business leaders to assess detection gaps across McDonald’s and drive the development, deployment, and maintenance of our global threat detection capabilities. This role will have a direct impact on building capabilities for the program through strong technical contributions. As a Detection Engineer, you must have a strong technical foundation and understanding of security concepts, solutions and technologies. This role is perfect for those looking to take the next step in their cybersecurity career, offering a unique opportunity to learn and grow while making a significant impact on one of the world’s most recognizable brands.

In this role, you will:

• Drive the implementation and ongoing maintenance of the alerting and detection strategy (ADS) framework across all enterprise security services.?
• Perform detection engineering and regularly write / maintain detection logic to identify suspicious activity.
• Document & track detection capabilities across numerous data sources.
• Support building process around Detection Development Lifecycle and drive ongoing process development/improvement efforts.
• Build automation and orchestration playbooks to streamline detection engineering, threat hunting and incident response activities.
• Participate in threat hunts to proactively identify threats in our corporate and market environments.
• Regularly review current use cases / detection logic to identify and remove gaps in coverage.
• Aid in efforts to gain greater visibility and control of our global environments.
• Collaborate with operations / engineering teams to enable detection engineering in services where cybersecurity response capability is limited.
• Act as a cybersecurity subject matter expert and contribute to the design and evolution of our enterprise security controls across our global environment.
• Keep up to date with current threat intelligence, trends, TTPs, and vulnerabilities to understand the cyber threat landscape as it applies to McDonald's.
• Document internal team policies and procedures for completing core functions and detection engineering lifecycle.
• Participate in purple team exercises with cyber defenders and action outputs from the GCS Offensive Security team.

Qualifications:

• Bachelor's degree in Cybersecurity, Detection Engineering, related technical fields, or equivalent practical experience.
• 4+ years of hands-on in-depth knowledge and technical experience in security operations including detection engineering, threat hunting, incident response, digital forensics, and/or threat intelligence.
• Exposure to data science and analytics solutions applicable to cybersecurity.
• Outstanding organizational, prioritization, communication, and multitasking skills, including the ability to translate technical concepts to non-technical stakeholders.
• Excellent written and verbal communication / presentation skills to effectively describe security event details and technical analysis.
• Supporting detection engineering in complex global organizations using broad technology stacks.
• Automating security detection and response, including requirements gathering from internal customers on high value use cases.
• Developing content using scripting languages like Python, Javascript or similar.
• Self-starter and creative problem-solver able to work well independently as well as part of a cohesive global team.
• Professional certifications such as GSEC, GMON, GDAT, CSAE, CSIE, OSCP, GCIH, and PCSAE.
• Must be familiar with frameworks such as MITRE ATT&CK and the Cyber Kill Chain and how to utilize them to assess detection capabilities and coverage.
• You should excel in identifying opportunities for developing new threat detection use cases based on security telemetry, environment baselining, actionable threat intelligence and Incident Response lessons learned.
• You should be able to identify gaps in our detection coverage across global infrastructure, and work with business partners to gain visibility and control through logging and detection content.
• Experience with enterprise security services such as EDR, SIEM, Email Security Gateways, and SOAR is essential.

Work location: Hyderabad, India

Work pattern: Full time role

Work mode: Hybrid