Cybersecurity Engineer II
GurugramFull-time8–14 yrsPosted 1 week ago
Leadership cybersecurity role at McCormick in Gurugram. Needs 8+ years and a B.Tech, B.E. or B.Sc.
About the role
The Security Engineer role supports the implementation and day-to-day advancement of a risk-based Secure Software Development Lifecycle (SSDLC) across McCormick’s application landscape. The engineer helps establish application ownership, inventory, and risk tiering; translates the control baseline into practical security requirements; and works with delivery teams to apply controls that fit each application and delivery model.
What you'll do
- Help prioritize application security activities toward the highest-risk applications, major technology changes, and business-critical services
- Provide practical secure coding guidance, reusable standards, and developer-facing support to help teams address common application vulnerabilities
- Work with delivery teams to tune results, reduce false positives, and focus remediation on exploitable or high-risk findings
- Partner with engineering and platform teams to introduce proportionate security checks into existing source-control and CI/CD workflows
- Coordinate application-security findings through triage, ownership, prioritization, remediation tracking, and validation
What you need
- CI/CD
- API testing
- SAP
- ERP
- Terraform
Good to have
- CISSP
- CEH
- AWS
- GCP
- ITIL
- Azure