Job Description
Department Overview
McDonald’s new growth strategy, Accelerating the Arches, encompasses all aspects of our business as the leading global omni-channel restaurant brand. As the consumer landscape shifts, we are using our competitive advantages to further strengthen our brand. One of our core growth strategies is to Double Down on the 3Ds (Delivery, Digital and Drive Thru). McDonald’s will accelerate technology innovation so 65M+ customers a day will experience a fast, easy experience, whether at one of our 25,000 and growing Drive Thrus, through McDelivery, dine-in or takeaway.
Leading this revolution is McDonald’s Global Technology organization made up of intrapreneurs who get to build really cool tech with scary smart people using the latest innovations like AI, IOT, and edge computing. We do this working along diverse, global teams who are always hungry for a challenge. It’s bonus points when you get to see your family and friends use the tech you build at their favorite McD restaurant.
We’re recruiting engineers to join our Global Technology team in Mexico City, Mexico as we open our McDonald’s Mexico office. Our Mexico City office will be a hub for technology innovation and operational support to help us build the solutions that will improve our customer, crew and employee experience each and every day.
Duties
McDonald’s is seeking an Engineer II – Application Security to join our cybersecurity team and take ownership of building and optimizing application security solutions. This role is deeply technical and focuses on building, configuring, and optimizing security tools and frameworks, automating security testing, and designing secure data flows across applications and services. This position emphasizes hands-on development, automation, and integration of security into the software development lifecycle.
McDonald’s is investing heavily in technology to drive our growth. We’re looking at how to use technology to improve customer experience and build new customer experiences. We’re also exploring technologies that can help us reduce or eliminate repetitive tasks and make employees’ jobs ultimately exciting. With all the new projects and initiatives, it is a dynamic era in our cybersecurity growth, helping to make a safer and Better McDonald's!
The Engineer II – Application Security will play a hands-on role in implementing and optimizing application security controls across the organization. This position will focus on integrating security into the software development lifecycle. The role requires close collaboration with developers, architects, and DevOps teams to integrate security controls into CI/CD pipelines, develop automation scripts, and verify security measures at scale.
Responsibilities & Accountabilities:
- Application Security Program Development:
- Design, implement, and maintain application security processes aligned with organizational standards and industry best practices. - Secure Development Lifecycle (SDLC):
Integrate security controls and testing into the SDLC, ensuring security is embedded from design through deployment. - SAST/DAST Tooling:
Manage and optimize Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) tools. Continuously improve security workflows, reduce false positives, and enhance developer experience. - Collaboration:
Partner with DevOps engineers, developers, architects, and product teams to provide guidance on Implementing security gates and automated checks within CI/CD pipelines. - Continuous Improvement:
Stay current with emerging threats, tools, and techniques; recommend enhancements to security processes and technologies.
Qualifications
- Education:
- Bachelor’s degree in computer science, Cybersecurity, or related field (or equivalent experience).
- Experience:
- 3+ years in application security or related cybersecurity roles.
- Hands-on experience with application penetration testing methodologies and tools.
- Proficiency with SAST and DAST tools.
- Experience integrating security tools into CI/CD pipelines
- Strong understanding of secure coding practices and common vulnerabilities (OWASP Top 10).
- Skills:
- Familiarity with CI/CD pipelines and integrating security tools.
- Excellent problem-solving and communication skills.
- Ability to work collaboratively across technical and business teams.
- Preferred Qualifications
- Experience with container security and cloud-native application security.
- Certifications such as OSCP, CEH, Security+.