Cloud Security Engineer (HYBRID)

Overview

McCormick & Company, Inc., a world leader in the spice, flavor and seasonings industry, is seeking a full time Cloud Security Engineer – Technology and Engineering . This position will report to the Sr. Manager Cybersecurity - Technology and Engineering .

The cloud security engineer role is a critical part of a global security team focused on enabling secure access to data, systems and services across cloud environments. This role contributes to designing, implementing and managing cloud security solutions that align with the organizational standards and risk framework.

As a key technical contributor, the cloud security engineer will serve as a security point of contact – working closely with engineers, analysts, IT teams and service providers to configure tools, support cloud initiatives, and process security requests. This role plays a hands-on part in maintaining a strong security posture, supporting compliance requirements, and continuously improving service delivery.

This position offers the opportunity to work with modern security technologies, influence secure architecture and drive real-world impact in a fast paced global environment.

Key Responsibilities

• Manage and fine-tune Cloud EDR, Security Center and other native security tools — making sure we’re protected and compliant.
• Monitor our cloud environment for misconfigurations, over-permissioned identities, and non-compliant resources—and work with teams to fix them.
• Apply secure configuration baselines to cloud assets, including storage, virtual machines, networking, and identity services.
• Help maintain strong governance in the cloud through Policy, tagging enforcement, and access reviews.
• Review and update NSGs, ASGs, firewalls, and other cloud-native controls to ensure proper segmentation and protection.
• Keep track of cloud security tool coverage and work to ensure all assets are onboarded and monitored.
• Assist in investigation and resolution of alerts from Cloud EDR, SIEM, and other cloud tools — helping security operations team to implement corrective measures.
• Identify risks both operational and security during day-to-day activities and during specific, targeted efforts. Make recommendations and / or take action to mitigate these issues as appropriate.
• Implements automation to reduce alert fatigue and improve signal-to-noise ratio in cloud alerts.
• Collaborate with cloud infrastructure, service providers, DevOps, and application teams to ensure secure deployment pipelines and environment hardening.
• Support vulnerability management in cloud environments — flag outdated configurations, missing patches, or identity risks.
• Stay current with evolving cloud threats and platform capabilities—bringing fresh ideas to how we improve our security posture.
• Contribute to sizing and budget estimation processes to align with application and solution life cycle / renewal schedules.
• Document configurations, exceptions, and workflows clearly so others can follow and maintain them.
• Participate in security projects, audits, and cloud-related compliance reviews.
• Provide guidance during the rollout of new services or migrations to make sure security is baked in from the start.
• Evaluates and integrates tools for CSPM, CIEM, and workload protection and drives improvements in governance and automation.
• Participate in internal workshops and architecture review boards for cloud platforms.
• Maintains certifications and hands on experience in evolving cloud technologies.

Required Qualifications

Other Skills And Competencies

Throughout the selection process, accommodations for applicants with disabilities are available upon request. Please notify H.R. if required.

Details

#J-18808-Ljbffr