Job Description:Company DescriptionMcDonald's growth strategy, Accelerating the Arches, encompasses all aspects of our business as the leading global omni‐channel restaurant brand.
As the consumer landscape shifts we are using our competitive advantages to further strengthen our brand.
One of our core growth strategies is to Double Down on the 3Ds (Delivery, Digital and Drive Thru).
McDonald's will accelerate technology innovation so 65M+ customers a day will experience a fast, easy experience, whether at one of our 25,000 and growing Drive Thrus, through McDelivery, dine‐in or takeaway.McDonald's Global Technology is here to power tomorrow's feel‐good moments.That's why you'll find us at the forefront of transformative technology, exploring new and innovative ways to serve our millions of customers and spread happiness one delicious Hot Fudge Sundae‐dipped fry at a time.
Using AI, robotics and emerging tech, we're digitizing the Golden Arches.
Combine that with our unparalleled integral scale, and we're reshaping all areas of the business, industry and every community that is home to a McDonald's restaurant.
We face complex tech challenges every day.
But that's where our diverse and talented teams come in.
They're made up of the best and brightest from all over the globe, and they thrive in the space where feel‐good meets fast‐paced.Our Global Mexico City Office will be a hub for technology innovation and operational support to help us build the solutions that will improve our customer, crew and employee experience each and every day.Department OverviewMcDonald's is hiring an Engineer I – Application Security to support building, configuring, and optimizing our application security ecosystem across applications.
This hands‐on role focuses on operating security tools, assisting with automation,



and embedding security throughout the SDLC.As McDonald's accelerates technology‐driven growth, this role helps deliver safer, more efficient experiences for customers and employees by reducing manual work and enabling new digital capabilities.
In this role, you will support the implementation and tuning of application security controls for web and mobile platforms.
You'll work closely with developers, architects, and product teams to create basic automation scripts and help validate security measures.DutiesAssist in building, implementing, and maintaining application security processes aligned to standards and best practices.Help embed security controls and testing throughout the SDLC for web and mobile applications.Operate and tune SAST and DAST tooling; incorporate security testing, reduce false positives, and improve developer experience.Contribute to perform security assessments, mixing automatic and manual approach.Collaborate with DevSecOps to implement CI/CD security pipelines and automated checks.QualificationsBachelor's in Computer Science, Cybersecurity, or related field (or equivalent experience).2+ years in application security or related cybersecurity rolesHands‐on experience with application penetration testing methodologies and tools (web and/or mobile).
Proficiency with SAST and DAST tools; familiarity with app security testing practices (e.g., OWASP ASVS).
Solid understanding of secure coding and common vulnerabilities (OWASP Top 10).
Basic scripting (Python, Bash, or PowerShell) and comfort with REST APIs.Familiarity with source control (e.g., GitHub/GitLab) and code review practices.Strong problem‐solving, communication, and collaboration skills.Exposure to containers and cloud‐native application security.Knowledge of mobile (iOS/Android) security topicsCertifications such as CEH, GSEC, Security+, Pentest+, or similar.We do not tolerate inequality, injustice, or discrimination of any kind.
#J-*****-Ljbffr

📌 Cybersecurity Engineer I (Xico)
🏢 McDonald's
📍 Xico