Sr Manager, Cyber Defense
Let's be part of something together
-
London, United Kingdom, N2 8AWEmployeeCompetitive
Apply Overview
Company Description
McDonald’s is proud to be one of the most recognized brands in the world, with restaurants in over 100 countries that serve 70 million customers daily. As the global leader in the food service industry, our legacy of innovation and hard work continues to drive us.
From drive thru updates to delivery to mobile order and pay, we are innovating quickly and growing. Joining McDonald's means thinking big and preparing for a career that can have influence around the world.
Department OverviewMcDonald’s new growth strategy, Accelerating the Arches, encompasses all aspects of our business as the leading global omnichannel restaurant brand. As the consumer landscape shifts, we are using our competitive advantages to strengthen our brand further. One of our core growth strategies is to Double Down on the 3Ds (Delivery, Digital, and Drive Thru). McDonald’s will accelerate technology innovation so 65M+ customers a day will experience a fast, easy experience, whether at one of our 25,000 and growing Drive-Thrus, through McDelivery, dine-in, or takeaway.
McDonald’s Global Technology organization is leading this tech revolution, comprised of intrapreneurs who get to build cool tech with scary intelligent people using the latest innovations like AI, IoT, and edge computing. We do this by working with diverse, global teams who are always hungry for a challenge. It’s bonus points when you see your family and friends use the tech you build at their favorite McD restaurant.
As we have matured as an engineering organization and seen the demands for technology grow exponentially, we’re gearing up to deliver on the next set of opportunities for the business. We are building up an in-house engineering team accountable for our strategic products, working alongside diverse squads of internal engineers and partners to solve technology innovation challenges at an incredible scale.
DutiesSecurity Operations & Service Delivery (UK / EMEA)
Lead the UK-based SOC team delivering monitoring, triage, investigation, and escalation across the EMEA timezone within the follow-the-sun GSOC model, owning the UK shift and ensuring clean handovers with the US and India locations.
Manage the end-to-end lifecycle of EMEA security events — from detection through investigation and escalation to Incident Response (CIRT) to closure — in line with defined SLOs and KPIs, coordinating with market security and technology teams.
Detection & Response Operations
Identify and investigate intrusions and drive effective response using SIEM, SOAR, EDR/XDR, and email security solutions, supporting threat hunting and developing remediation plans across EMEA markets.
Provide detection tuning and feedback loops to Detection Engineering and managed providers, and coordinate with CIRT and Cyber Threat Intelligence on handoffs and IOC enrichment.
People Leadership & Team Development
Lead, mentor, and develop the UK team of analysts — managing shift scheduling, capacity, and performance while providing hands-on technical guidance to mature their tradecraft and response capabilities.
Metrics, Reporting & Program Maturity
Be accountable for UK SOC metrics (MTTD, MTTR, MTTC, case backlog) and translate operational data into executive-ready narratives, driving continuous improvement of the SOC.
QualificationsBachelor’s degree in Computer Science, Cybersecurity, Information Technology, or equivalent professional experience.
6+ years of experience in cybersecurity operations, security monitoring, detection and response, or IT security incident management.
Demonstrated experience leading or supervising SOC teams, including direct people management, coaching, and performance management.
Deep technical understanding of SIEM platforms, SOAR orchestration, EDR/XDR solutions, log management, and security event investigation workflows.
Expert-level understanding of security monitoring, alert triage methodologies, incident escalation frameworks, and the cyber kill chain.
In-depth understanding and practical application of the NIST Cybersecurity Framework.
Strong experience working with a SOC/NOC and coordinating with legal and market operations during incidents.
Strong communication and stakeholder management skills, with the ability to translate operational data and security events into business risk language.
Proven ability to operate under pressure, manage competing priorities, and lead teams through high-stress incident response situations.
Willingness and ability to work non-standard hours, including nights, weekends, and holidays, in support of active incident response and global SOC coverage requirements.
Professional certifications such as CISSP, CISM, GCIH, GCIA, GCFA, GREM, OSCP, or equivalent.
Experience with Google SecOps/Azure Sentinel, Defender/SentinelOne/CrowdStrike, or comparable SIEM/EDR platforms at enterprise scale.
Outstanding technical writing skills and the ability to communicate to diverse audiences.
Additional information
At McDonalds we are People from all Walks of Life...People are at the heart of everything we do, and they make the McDonalds experience. We embrace diversity and are committed to creating an inclusive culture that means people can be their best authentic self in our restaurants and offices, which helps us to better serve our customers. We have a strong heritage of diversity and representation within our communities, which we are proud of. The diversity of our people, customers, Franchisees, and suppliers gives us strength.
We do not tolerate inequality, injustice, or discrimination of any kind. These are hugely important issues and a brand with our reach and relevance means we have a very meaningful role to play.
We also recognise our responsibility as a large employer to continue being active in our communities, helping to develop skills and drive aspirations that will help people to be more aware of the world of work and more successful within it, whether with McDonalds or elsewhere.
Benefits
perksHybrid Working
Enjoy the flexibility of hybrid working with 3 days in the office and 2 days remote.wellnessPrivate Medical Care
Corporate employees receive private medical care, either immediately or following 6 months service depending on your role.perksHoliday Allowance
Full-time office employees receive 28 days paid holiday annually, plus 2 months sabbatical per every 10 years’ service.wellnessWellness Benefits
Your wellbeing matters. Enjoy access to wellbeing resources, mental health support, and initiatives designed to help you feel your best – in and out of work.perksPension & Life Assurance
Access our stakeholder pension scheme alongside Life Assurance cover if you contribute a minimum of 3%.perksCareer Growth
We highly value talent and believe in helping our people grow. We support career progression through mentorship, training and leadership development opportunities.wellnessValues Heroes
We live by our values and we reward those who demonstrate their commitment to them.perksPerformance Reviews & Bonus
Your performance will be reviewed formally every 6 months and pay is reviewed annually based on performance. There is also potential to receive an annual bonus each year.perksMeals at Work
You can choose food from our restaurant menu on your break and can even try the latest promotions.recognitionLength of service
Your length of service doesn’t go unnoticed – we reward you with monetary benefits for long service.perksPay & Perks
Receive competitive pay and a range of exclusive perks, including employee discounts and an on-site gym at our Head Office.perksEmployee Discounts
Benefit from our generous employee discount scheme, covering a range of retailers and services across the UK.perksSummer Fridays
Summer Fridays allow our Corporate Careers teams to finish early, every Friday, during the summer months.Sr Manager, Cyber Defense
- Location:
- London, United Kingdom, N2 8AW
- Contract Type:
- Employee
- Pay:
- Competitive
Frequently Asked Questions
What can I expect from the recruitment process?
The recruitment process differs for each role. If we think you’re a good fit, we’ll invite you to a competency based interview and then onto a second interview usually with an associated task to complete or present.
What are the pay rates at McDonald’s?
Our pay rates differ from role to role, but we always ensure that these rates remain competitive. Alongside this, we also offer a wide range of benefits including holiday and sick pay, and employee discounts that offer savings at over 1,600 retailers.
Does McDonald's offer flexible working?
Enjoy the flexibility of our hybrid working model with 3 days in the office to foster collaborative team environment and 2 days remote to support work/ life balance.
What documents should I provide as proof of eligibility to work?
Before we can employ you, we are required to verify your eligibility to work in the UK & Ireland. You’ll need to provide acceptable original documents such as a valid passport or a valid UK/Ireland visa (with a college letter listing term dates, where applicable). Only original documents will be accepted.
How do I apply for a vacancy at McDonald’s head office?
Either click on the 'Job search' page or the ‘Job search’ button on the page of the vacancy you’re interested in. Then select the role that suits you, and complete an online application form.
How much holiday am I entitled to?
All full-time members of the Head Office team get 28 days paid holiday as well as bank holidays on top. For part-time workers, holiday will be determined on a pro-rata basis.
What do I wear in the office?
At our Head Office, we have a Dress for your Day Policy - the bottom line is that we want you to be empowered to make the decisions that meet the needs of your day.
I have a disability, what support can I get with my McDonald's job application?
During the application process, you can request for any reasonable adjustments to be made so you can find the right support needed during the application and onwards.
I want my pronouns to be known if I get this role, is this possible?
Yes. When you work in Head Office, you’ll receive a company email address and will easily be able to include your desired pronouns in the signature.
Can I get individual feedback on my application or interview?
Due to the high level of applications we receive not everyone will receive individual feedback. This depends on where you are in our process and this could potentially be written or over the phone.
Are there any wellbeing services I can access?
Yes! McDonald’s has a wellbeing hub on the staff website and our colleagues have access to the Employee Assistant Programme (EAP), which is run by AXA health care, offering a variety of services.
Is there opportunity for progression at McDonald’s?
Definitely. We highly value talent and always aim to encourage employees to remain within our business. To put it into perspective, half of our Executive Team started their career in restaurants. At McDonald’s, there are no limits to how far or fast you can progress.
Explore more