Cybersecurity Engineer II

About the role

The Security Engineer role supports the implementation and day-to-day advancement of a risk-based Secure Software Development Lifecycle (SSDLC) across McCormick’s application landscape. The engineer helps establish application ownership, inventory, and risk tiering; translates the control baseline into practical security requirements; and works with delivery teams to apply controls that fit each application and delivery model.

What you'll do

• Help prioritize application security activities toward the highest-risk applications, major technology changes, and business-critical services
• Provide practical secure coding guidance, reusable standards, and developer-facing support to help teams address common application vulnerabilities
• Work with delivery teams to tune results, reduce false positives, and focus remediation on exploitable or high-risk findings
• Partner with engineering and platform teams to introduce proportionate security checks into existing source-control and CI/CD workflows
• Coordinate application-security findings through triage, ownership, prioritization, remediation tracking, and validation

What you need

• 8–14 yrs of experience
• CI/CD
• API testing
• SAP
• ERP
• Terraform
• B.Tech or B.E. or B.Sc or BCA

Good to have

• CISSP
• CEH
• AWS
• GCP
• ITIL
• Azure