Analyst, Application Security
Date: May 5, 2026
Location: Mexico City, MX, 6600
Company: McDonald's Corporation
Company Description
McDonald’s growth strategy, Accelerating the Arches, encompasses all aspects of our business as the leading global omni-channel restaurant brand. As the consumer landscape shifts we are using our competitive advantages to further strengthen our brand. One of our core growth strategies is to Double Down on the 3Ds (Delivery, Digital and Drive Thru). McDonald’s will accelerate technology innovation so 65M+ customers a day will experience a fast, easy experience, whether at one of our 25,000 and growing Drive Thrus, through McDelivery, dine-in or takeaway.
McDonald’s Global Technology is here to power tomorrow’s feel-good moments.
That’s why you’ll find us at the forefront of transformative technology, exploring new and innovative ways to serve our millions of customers and spread happiness one delicious Hot Fudge Sundae-dipped fry at a time. Using AI, robotics and emerging tech, we’re digitizing the Golden Arches. Combine that with our unparalleled global scale, and we’re reshaping all areas of the business, industry and every community that is home to a McDonald’s restaurant. We face complex tech challenges every day. But that’s where our diverse and talented teams come in. They’re made up of the best and brightest from all over the globe, and they thrive in the space where feel-good meets fast-paced.
Our Global Mexico City Office will be a hub for technology innovation and operational support to help us build the solutions that will improve our customer, crew and employee experience each and every day.
Department Overview
McDonald’s new growth strategy, Accelerating the Arches, is built on our ambition to Double Down on the 3Ds: Delivery, Digital, and Drive-Thru. Technology is at the center of this strategy, enabling 65M+ customers each day to enjoy fast, easy, and secure experiences across web, mobile, and restaurant channels.
The Global Technology organization designs, builds, and operates the platforms behind our global omni-channel experience. Within Global Technology, Global Cybersecurity Services (GCS) protects McDonald’s customers, crew, and brand by securing our digital ecosystem end-to-end.
The External Web Application and API Protection (E-WAAP) team is responsible for securing McDonald’s external web and API surfaces across web, mobile, and partner integrations using Akamai’s edge security platform (WAF, bot management, DDoS, CDN, and API security).
Duties
Responsibilities & Accountabilities
Monitoring & First‑Line Triage
- Monitor Akamai dashboards, alerts, and logs to identify abnormal traffic, errors, or performance issues impacting web and API properties.
- Perform initial triage on alerts and tickets by gathering key context (affected application, timeframe, recent changes) and escalating clear, concise summaries to Engineers.
- Track incidents, changes, and service requests in ServiceNow and Jira, ensuring accurate categorization, documentation, and status updates.
Staging & Validation
- Support staging configuration reviews by validating URLs, headers, origins, and expected WAF and routing behavior.
- Execute standard validation playbooks (e.g., path testing, error scenarios, status codes) and document results for engineering review.
- Assist with post‑change and post‑deployment production validations to confirm no negative user or application impact.
Data Analysis & Reporting
- Collect and organize metrics related to WAF activity, attack trends, false positives, performance, and security coverage to support recurring reports.
- Perform basic log analysis using dashboards, queries, and filters to identify spikes, notable patterns, or anomalies.
Documentation & Process Improvement
- Maintain and update Confluence documentation, runbooks, and standard operating procedures for common tasks such as validations, intake requirements, and escalations.
- Help refine onboarding materials and intake templates used by application teams requesting E‑WAAP services.
- Participate in Agile ceremonies to stay aligned on priorities, capture action items, and keep tickets current
Qualifications
Basic Qualifications
- Bachelor’s degree in Computer Science, Information Technology, Engineering, or equivalent practical experience.
- 0–2 years of experience in IT operations, technical support, security, or a related internship or apprenticeship.
- Basic knowledge of Linux or cloud environments, along with introductory scripting experience (e.g., Python, Bash, PowerShell, or similar).
- Foundational understanding of HTTP, TLS, DNS, CDN, and SDK concepts, as well as basic web development technologies such as HTML, JavaScript, and APIs.
- Basic knowledge of web technologies, including HTTP behavior, browsers, and simple web application functionality, with a demonstrated interest in security.
- Comfort working with dashboards, log data, alerting systems, and ticketing tools such as ServiceNow and Jira.
- Strong attention to detail, curiosity, and a willingness to learn while following structured processes and documentation.
Preferred Qualifications
- Exposure to any Web Application Firewall (WAF) or Content Delivery Network (CDN) platform (e.g., Akamai, Cloudflare, F5) through coursework, labs, internships, or self-directed learning.
- Experience using collaboration and documentation tools such as Confluence, Jira, and Microsoft Teams in a team-based environment.
Additional information
At McDonalds we are People from all Walks of Life...
People are at the heart of everything we do, and they make the McDonalds experience. We embrace diversity and are committed to creating an inclusive culture that means people can be their best authentic self in our restaurants and offices, which helps us to better serve our customers. We have a strong heritage of diversity and representation within our communities, which we are proud of. The diversity of our people, customers, Franchisees, and suppliers gives us strength.
We do not tolerate inequality, injustice, or discrimination of any kind. These are hugely important issues and a brand with our reach and relevance means we have a very meaningful role to play.
We also recognise our responsibility as a large employer to continue being active in our communities, helping to develop skills and drive aspirations that will help people to be more aware of the world of work and more successful within it, whether with McDonalds or elsewhere.