Endpoint Detection and Response Engineer III
McDonald's6 days ago
Base Salary
$138k - $173k/yr
Responsibilities
- Engineer, configure, and operate enterprise endpoint protection platforms and controls.
- Improve the operational stability, reliability, and effectiveness of endpoint protection services.
- Collaborate with Detection Engineering to produce high-quality endpoint telemetry for detection and response use cases.
- Implement preventative and endpoint hardening controls that reduce risk while preserving business usability.
- Develop and maintain scripts, automation, and tooling to improve consistency and operational efficiency.
- Troubleshoot complex endpoint protection issues and provide advanced escalated technical support.
- Maintain endpoint protection documentation, runbooks, and standard operating procedures.
- Provide technical input to security design and improvement initiatives.
- Monitor emerging endpoint threats, technologies, and trends and share relevant insights.
- Analyze sophisticated issues, determine business impact and root causes, and implement corrective actions.
- Work with third-party vendors and service providers.
Requirements
- At least 5 years of cybersecurity experience focused on endpoint protection engineering or operations.
- Hands-on experience with enterprise endpoint protection or EDR/XDR platforms.
- Strong knowledge of Windows, macOS, and/or Linux endpoint operating systems.
- Experience implementing and operating security controls at enterprise scale.
- Proficiency in scripting or automation with PowerShell or Python.
- Understanding of NIST, CIS Controls, and MITRE ATT&CK.
- Ability to participate in a 24x7x365 team.
- Strong analytical, communication, collaboration, attention-to-detail, and troubleshooting skills.
- Preferred: experience designing, implementing, and operating enterprise-scale endpoint protection and application-control products across global environments.
- Preferred: experience securing IoT devices, cloud-hosted workloads, virtual machines, and containerized environments across AWS, Azure, Google Cloud, or OCI.
- Preferred: experience supporting blue, purple, or red team activities through endpoint control engineering and telemetry improvements.
- Preferred: experience integrating security platforms through REST and GraphQL APIs.
- Preferred: experience integrating endpoint protection platforms with ServiceNow.
- Preferred: experience using PowerBI or Tableau for endpoint trend analysis, risk-signal identification, and technical communication.
- Preferred: working knowledge of ITIL and Agile delivery models.
- Preferred: professional certifications such as CISSP, CISM, or ITIL, or equivalent advanced security or engineering credentials.
Benefits
- Health and welfare benefits, including medical, prescription drug, mental health, dental, vision, and life insurance coverage.
- Bonus eligibility based on individual and company performance.
- Eligibility for stock or other equity grants under the long-term incentive plan.
- Flexible work arrangements.
- Tuition assistance and a sabbatical program.
- Reasonable workplace accommodations are available for qualified individuals with disabilities.
About McDonald's
McDonald’s operates and franchises quick-service restaurants serving burgers, chicken, breakfast items, coffee, and soft drinks to consumers worldwide. The company earns revenue from company-operated restaurants plus franchising fees and real-estate rent paid by independent owner-operators, who run about 95% of its 40,000+ locations across 100+ countries. Founded in 1955 and headquartered in Chicago, it is publicly traded on the NYSE under the ticker MCD.