Analyst - Cybersecurity Operations (Vulnerability Management)

Company Description

McDonald’s growth strategy, Accelerating the Arches, encompasses all aspects of our business as the leading global omni-channel restaurant brand. As the consumer landscape shifts we are using our competitive advantages to further strengthen our brand. One of our core growth strategies is to Double Down on the 3Ds (Delivery, Digital and Drive Thru). McDonald’s will accelerate technology innovation so 65M+ customers a day will experience a fast, easy experience, whether at one of our 25,000 and growing Drive thrus, through McDelivery, dine-in or takeaway. 

McDonald’s Global Technology is here to power tomorrow’s feel-good moments.That’s why you’ll find us at the forefront of transformative technology, exploring new and innovative ways to serve our millions of customers and spread happiness one delicious Hot Fudge Sundae-dipped fry at a time. Using AI, robotics and emerging tech, we’re digitizing the Golden Arches. Combine that with our unparalleled global scale, and we’re reshaping all areas of the business, industry and every community that is home to a McDonald’s restaurant. We face complex tech challenges every day. But that’s where our diverse and talented teams come in. They’re made up of the best and brightest from all over the globe, and they thrive in the space where feel-good meets fast-paced.  

Check out the McDonald’s  Global Technology Technical Blog to learn how technology and our global team are directly enabling the Accelerating the Arches strategy. 

Job Description

McDonald’s Global Cyber Security is looking for a highly motivated, diligent, and skilled analyst to join the Vulnerability Management Technology team.  McDonald’s Vulnerability Management team protects McD’s customers, data, and brand by identifying vulnerabilities and threats to our organization and working to drive remediation of identified security risks. Vulnerability Management is a capability of Global Security Services within the larger Global Cyber Security Operations (GCS) function. Join us as Analyst, Cybersecurity Operations (Vulnerability Management) to support and improve our efforts to identify and reduce McDonald’s attack surface and help our business continue to have remarkable impacts on our customer’s lives.

This role is a key member of the Vulnerability Management team and works with internal and external groups to identify and drive remediation of information security risks.  In this role, you will develop new Cybersecurity services and enhancing existing services to meet the increasing needs for protecting our users, devices, networks, applications, and data through vulnerability management.  The ideal candidate will have prior experience building and managing a vulnerability management platform, analyzing vulnerabilities to determine applicability and impact, reporting vulnerability and risk information to senior leadership, and leading prioritization and remediation strategies in an enterprise environment.

Responsibilities:

• Maintain awareness of critical vulnerabilities and emerging threats that may impact McDonald’s.
• Focus on developing processes and business relationships for the effective and timely remediation of vulnerabilities in McDonald’s environment.
• Maintain key stakeholder relationships and communications to ensure agreed to SLA’s are understood and exceptions escalated as required
• Utilize vulnerability management infrastructure that includes scanners, sensors, and agent configurations. (Tenable/Nessus, Security Center, Qualys, Wiz, ServiceNow and RBVM for vulnerability management.)
• Serve as a Vulnerability Management Subject Matter Expert (SME) assisting operational teams in understanding criticality of detected vulnerabilities, as well as providing remediation guidance.
•  Focus on prioritization of vulnerabilities based on potential impact to McDonald’s; exposure and likelihood of compromise based on Common Vulnerability Score System (CVSS); Tenable Vulnerability Priority Rating (VPR); external threats; and internal risk factors.
• Mange VM projects with a focus on analytics and security.
• Assist in identifying gaps, performance issues, growth of usage, and other metrics to show the health and effectiveness of vulnerability management platforms.
• Assist others with developing reporting and providing analysis around enterprise vulnerability data.
• Create, modify, and mature vulnerability management reports and metrics to drive remediation of vulnerabilities throughout McDonald’s environments.
• Analyze large data sets to understand risks and trends and improve reporting maturity through risk-based prioritization, automation and consolidation.
• Analyze large data sets to improve processes related to communication of vulnerabilities and actionable resul