Cyber Engineer III

Job Summary Join to apply for the Cyber Engineer III - API Security role at McDonald's . The role focuses on securing McDonald’s external web and API surfaces using Akamai’s edge security platform. E-WAAP Team The External Web Application and API Protection (E-WAAP) team secures McDonald’s external web and API surfaces across web, mobile, and partner integrations using Akamai’s edge security platform (WAF, bot management, DDoS, CDN, and API security). Senior Engineer Responsibilities & Accountabilities Platform engineering & design Lead onboarding of new web and API workloads to Akamai from discovery to production cutover. Design and implement WAF, bot management, DDoS, and rate-limiting policies tailored to application risk profiles and business requirements. Build reusable configuration patterns, templates, and reference architectures for common McDonald’s application types. Use Akamai APIs, automation frameworks, and infrastructure-as-code (e.g., Terraform, Python, CI/CD pipelines) to manage configurations at scale. Security operations & tuning Lead incident triage and investigations for WAF, API, and bot-related events. Analyze WAF and CDN logs to identify attacks, false positives, and evasion attempts; refine policies and exception sets. Collaborate with Security Operations, Threat Intelligence, and product security teams to map emerging threats into new rule sets. Drive continuous improvement in detection quality, block rates, and false-positive reduction while maintaining performance SLAs. Dev & automation focus Partner with developers to integrate Akamai security checks into CI/CD (e.g., automated policy promotions, pre-prod validation jobs, automated regression checks). Develop internal tools and scripts (Python, Bash, TypeScript, etc.) to streamline common workflows. Provide technical requirements and guidance into product roadmaps for observability, logging, and security analytics. Governance, metrics, and leadership Own platform health and risk metrics and present them regularly to leadership and stakeholders. Lead operational governance forums with product teams to review posture, tuning backlog, and upcoming changes. Mentor and coach G3 Engineers and Analysts. Contribute to and lead updates of SOPs, intake processes, runbooks, and standards for Akamai and E-WAAP. Qualifications Bachelor’s degree in computer science, engineering, information technology, or equivalent experience. Knowledge of Agile software development process and promotion of secure outcome‑driven mindset. Experience working with large-scale, global, high-availability platforms (CDN, edge, or cloud) where performance and latency are critical. Prior experience with Akamai APIs, Terraform, or other infrastructure-as-code tools for managing Akamai configurations at scale. Familiarity with SIEM/SOAR tools and log analysis for WAF and CDN events. Industry certifications in security or cloud (e.g., CISSP, CCSP, GIAC, cloud provider security certifications). Additional Information McDonald’s is committed to providing qualified individuals with reasonable accommodations to perform the essential functions of their jobs. If you require assistance accessing or reading this job posting or otherwise seek assistance in the application process, please contact McDonald’s provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to sex, sex stereotyping, pregnancy (including pregnancy, childbirth, or medical conditions related to pregnancy, childbirth, or breastfeeding), race, color, religion, ancestry or national origin, age, disability status, medical condition, marital status, sexual orientation, gender, gender identity, gender expression, transgender status, protected military or veteran status, citizenship status, genetic information, or any other characteristic protected by federal, state or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, training. Nothing in this job posting or description should be construed as an offer or guarantee of employment. #J-18808-Ljbffr