Analyst, Application Security

Department Overview

McDonald’s is seeking an Analyst – Application Security to support our cybersecurity team as we protect our customers, employees, restaurants, digital platforms, and the McDonald’s brand. This role will focus on AI Security, helping assess, monitor, and strengthen the security of artificial intelligence, machine learning, and generative AI solutions used across the enterprise while supporting secure application development practices.

McDonald’s is investing heavily in technology and AI to improve customer experience, enhance restaurant operations, support employees, and enable new ways of working. As AI adoption expands, cybersecurity must help ensure these capabilities are implemented responsibly, securely, and in alignment with enterprise standards. This is a dynamic time in our cybersecurity growth as we help build a safer, smarter, and better McDonald’s.

The Analyst – Application Security will support the AI Security program by helping identify, assess, and reduce risks related to AI-enabled applications, tools, vendors, data usage, incidents, and enterprise adoption. This position will work closely with Cybersecurity, Global Technology, Legal, Responsible AI, Procurement, vendors, business stakeholders, AI consumers, and end users to support secure AI adoption, improve governance visibility, integrate AI security tooling, monitor emerging risks such as shadow AI, support AI-related incident response, and help ensure AI capabilities are used safely, responsibly, and cost-effectively across the enterprise.

Duties

• Monitor emerging AI threats and attacks.

• Assess AI tools, use cases, vendors, risks, and controls.
• Support AI threat modelling and security reviews.
• Implement AI security monitoring and reporting tools.
• Identify shadow AI and governance gaps.
• Track AI usage, costs, and savings.
• Triage AI misuse, exposure, and incidents.
• Document incidents and corrective actions.
• Promote secure AI-assisted development.
• Define practical AI security requirements.
• Report AI risks, costs, usage, and metrics.
• Create AI security guidance and training.

Qualifications

• Bachelor’s degree in a relevant field or equivalent experience.
• 2+ years’ experience in application security, cybersecurity, software development, cloud security, AI/ML security, or a related field.
• Knowledge of secure development, common vulnerabilities, and SDLC security.

• Familiarity with SAST, SCA, DAST, API security, secrets detection, vulnerability management, and CI/CD security.
• Awareness of AI risks, including data exposure, prompt injection, agent misuse, and vendor risk.
• Clear communication of security risks and recommendations to varied audiences.