below marketmost similar roles pay hereabove market
This role pays less than
51%
of similar roles. Most pay
$156,600–$216,600
— the blue band above.
At the midpoint, this role pays about
$188k
versus about
$187k
for comparable roles.
Based on 240 similar postings.
Employer
About McDonald’s Corporation
McDonald’s Corporation is the world's largest fast-food chain by revenue, operating over 40,000 locations in more than 100 countries.
McDonald’s Corporation currently has
22 open roles
on FindRole.
Listed pay typically runs
$138,207–$172,758
across 21 roles with salary data.
The Sr Manager, Cyber Defense leads a team responsible for developing, validating, and maintaining threat detections across a global technology environment. This role involves owning the detection engineering roadmap, managing technical staff, and translating threat intelligence and incident findings into prioritized engineering work. Key responsibilities include establishing detection-as-code practices, managing the detection lifecycle, and improving coverage by closing telemetry gaps. The successful candidate will utilize SIEM and endpoint security platforms, detection query languages, and scripting for security automation. They must apply software engineering practices like version control and peer review while using the MITRE ATT&CK framework to prioritize detections. The work focuses on identifying and investigating threats across corporate and market environments, ensuring detection effectiveness through validated coverage and telemetry health.
Manage and develop a team of detection engineers through hiring, coaching, and performance management.
Own the detection engineering roadmap and prioritize the backlog based on risk, capacity, and technical dependencies.
Lead the design, development, testing, deployment, and retirement of detection content across security platforms.
Establish detection-as-code practices including version control, peer review, automated testing, and rollback procedures.
Partner with technology owners to close telemetry gaps and improve the quality of security data.
Validate detections through controlled testing with Offensive Security, Threat Intelligence, and Incident Response teams.
Translate threat-hunting findings into maintained detection content and identify opportunities for automation.
Measure and report detection effectiveness regarding coverage, alert quality, and telemetry health.
What we're looking for
Demonstrated experience developing and operating production detections with depth in detection engineering, threat hunting, incident response, or security operations.
Experience directly managing technical security staff, including coaching, performance management, and delivery accountability.
Strong technical judgment in detection logic, adversary behavior, and telemetry needed to identify malicious activity.
Hands-on experience with SIEM and endpoint security platforms, detection query languages, and scripting or programming for security automation.
Experience applying software engineering practices to security content, including version control, testing, and peer review.
Ability to apply MITRE ATT&CK to prioritize and validate detections while recognizing framework limitations.
Ability to coordinate delivery across teams and explain technical gaps, risk, and tradeoffs to technical and nontechnical stakeholders.
Bachelor’s degree in a relevant field or equivalent practical experience.