About the job

You may know McCormick as a leader in herbs, spices, seasonings, and condiments – and we're only getting started on our journey to create flavors for the globe. At McCormick, we're always looking for new people to bring their unique perspective to our team.

McCormick employees – all 14,000 of us across the world – are what makes this company a great place to work.

Position Overview:

The End Point Security Engineer will be a member of a global team of security engineers, architects and practitioners who are enabling business growth and access to information, data, and services from anywhere with a security and risk minded approach. The role requires a broad range of knowledge, skills, and experience in IT (Information Technology) and IT security, focused on the servers and endpoints and other environments to ensure security is incorporated into all components of our environment as per our standards and aligned to our risk framework.

Key Responsibilities

Provide strategic oversight during endpoint-related security incidents, guide root cause analysis, and drive process improvements through ITSM and tooling enhancements.
Deliver and manage large-scale endpoint security engineering initiatives across IT, OT, and cloud environments, ensuring alignment with business and cybersecurity strategy.
Implement, operate, and continuously enhance endpoint security platforms (e.g., EDR/XDR, device control, encryption, vulnerability agents), including automation and validation of security posture.
Lead configuration lifecycle management, OS hardening, enforcement of technical standards, and scalable endpoint security architecture practices.
Drive compliance integration into endpoint engineering workflows, support audit readiness, and remediate endpoint-related risks in partnership with Legal and Compliance teams.
Contribute to innovation through automation, orchestration, peer reviews, documentation updates, and cross-team collaboration while mentoring engineers and supporting secure business enablement.
Support strategic planning activities including tooling roadmaps, upgrade cycles, lifecycle renewals, resource modeling, and continuous improvement initiatives.

Additional/Secondary Responsibilities

Provide incident response, technology and troubleshooting support when needed.
Other duties as assigned.

Required Qualifications:

Certifications and/or Licenses : One or More of: GIAC Certified, CCSK, OCSP, CISSP (Certified Information Systems Security Professional), CEH, ITIL, CCNS, CISC, CPFA, RHCE, Microsoft Certification, Security+, or other related security certification

Experience :

3–6 years of hands-on experience in endpoint security, cybersecurity engineering, or systems administration within enterprise environments, with a strong understanding of endpoint threats, tools, and operational requirements.
Proficient in deploying and managing core endpoint security technologies, including EDR, antivirus, encryption, patching, and posture management solutions across Windows platforms; experience with Linux is a plus.
Comfortable using scripting languages such as PowerShell or Python to automate operational tasks, streamline compliance checks, and support configuration management efforts.
Familiar with cybersecurity standards and control frameworks such as NIST CSF, CIS Benchmarks, or ISO 27001, with practical experience supporting compliance initiatives and audit readiness.
Able to collaborate effectively across IT, compliance, and infrastructure teams to implement secure configurations, remediate endpoint issues, and contribute to incident investigations when needed.
Demonstrated commitment to continuous learning, staying current with emerging endpoint threats, tools, and industry best practices through training, certifications, or hands-on experimentation.

Interpersonal Skills

Strong communication and collaboration skills with the ability to work effectively across globally distributed, multi-disciplinary teams and interact confidently with both technical and non-technical stakeholders.
Proven ability to manage competing priorities, handle high-pressure situations calmly, and deliver results with attention to detail and professionalism.
Skilled in building relationships and credibility at all levels of the organization, with the ability to influence decisions, align stakeholders, and present complex information in business-relevant terms.
Demonstrated problem-solving and conflict resolution abilities, with a consultative approach to challenges and a commitment to driving solutions forward.
Positive, customer-focused mindset with a strong sense of ownership, accountability, and follow-through on tasks and commitments.

Other Skills & Competencies

Proven ability to translate complex technical requirements into business-relevant terms and communicate effectively with both technical and non-technical audiences across diverse global teams.
Demonstrated agility in adapting to changing priorities, business needs, or emerging threats, with a proactive mindset for identifying, assessing, and executing cybersecurity initiatives independently.
Strong change management skills, with experience considering cultural, organizational, and operational impacts when implementing security controls, processes, or enterprise-wide policies.
Skilled in gathering, documenting, and aligning business, functional, and technical requirements to ensure that cybersecurity solutions meet organizational goals and constraints.
Solid business and financial acumen, with experience developing business cases, contributing to operational and capital budgeting processes, and aligning security investments to measurable value and ROI.
Committed to maintaining the confidentiality of sensitive information and operating with integrity and discretion; fluent in English with the ability to work effectively across cultures and geographies.

Endpoint Security Engineer