End Point Security Engineer

McCormick & Company, Incorporated; Gurgaon; On-site; INR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Career growth opportunities

Flexibility and support for diverse life stages

Wellbeing programs including physical and mental wellness

Job summary

McCormick & Company, Incorporated is seeking a Cyber Analyst IV for their Gurgaon office. The role involves enhancing endpoint security across various environments, providing oversight during security incidents, and implementing robust security protocols.

The ideal candidate will have 3-6 years of experience in endpoint security, hold relevant cybersecurity certifications, and demonstrate strong collaboration and communication skills across diverse teams.

Qualifications

• 3-6 years of hands-on experience in endpoint security or cybersecurity engineering.
• Experience with deploying endpoint security technologies across Windows and Linux.
• Strong understanding of endpoint threats and operational requirements.

Responsibilities

• Provide strategic oversight during endpoint security incidents.
• Deliver large-scale endpoint security engineering initiatives across environments.
• Enhance endpoint security platforms and operations.

Skills

Endpoint security

Cybersecurity engineering

Scripting (PowerShell/Python)

Compliance standards (NIST, ISO)

Incident response

Education

GIAC Certified or equivalent certification

CISSP or equivalent certification

Tools

EDR/XDR platforms

Antivirus solutions

Encryption tools

PowerShell

Python

Job description

Cyber Analyst IV - Insider Trust

Benefits

• Career growth opportunities
• Flexibility and Support for Diverse Life Stages and Choices
• Wellbeing programs including Physical & Mental wellness

Position Overview

The End Point Security Engineer will be a member of a global team of security engineers, architects and practitioners who are enabling business growth and access to information, data, and services from anywhere with a security and risk minded approach. The role requires a broad range of knowledge, skills, and experience in IT (Information Technology) and IT security, focused on the servers and endpoints and other environments to ensure security is incorporated into all components of our environment as per our standards and aligned to our risk framework.

Key Responsibilities

• Provide strategic oversight during endpoint-related security incidents, guide root cause analysis, and drive process improvements through ITSM and tooling enhancements.
• Deliver and manage large-scale endpoint security engineering initiatives across IT, OT, and cloud environments, ensuring alignment with business and cybersecurity strategy.
• Implement, operate, and continuously enhance endpoint security platforms (e.g., EDR/XDR, device control, encryption, vulnerability agents), including automation and validation of security posture.
• Lead configuration lifecycle management, OS hardening, enforcement of technical standards, and scalable endpoint security architecture practices.
• Drive compliance integration into endpoint engineering workflows, support audit readiness, and remediate endpoint-related risks in partnership with Legal and Compliance teams.
• Contribute to innovation through automation, orchestration, peer reviews, documentation updates, and cross-team collaboration while mentoring engineers and supporting secure business enablement.
• Support strategic planning activities including tooling roadmaps, upgrade cycles, lifecycle renewals, resource modeling, and continuous improvement initiatives.

Additional Responsibilities

• Provide incident response, technology and troubleshooting support when needed.
• Other duties as assigned.

Required Qualifications

Certifications and/or Licenses: One or More of: GIAC Certified, CCSK, OCSP, CISSP (Certified Information Systems Security Professional), CEH, ITIL, CCNS, CISC, CPFA, RHCE, Microsoft Certification, Security+, or other related security certification.

Experience

• 3–6 years of hands‑on experience in endpoint security, cybersecurity engineering, or systems administration within enterprise environments, with a strong understanding of endpoint threats, tools, and operational requirements.
• Proficient in deploying and managing core endpoint security technologies, including EDR, antivirus, encryption, patching, and posture management solutions across Windows platforms; experience with Linux is a plus.
• Comfortable using scripting languages such as PowerShell or Python to automate operational tasks, streamline compliance checks, and support configuration management efforts.
• Familiar with cybersecurity standards and control frameworks such as NIST CSF, CIS Benchmarks, or ISO 27001, with practical experience supporting compliance initiatives and audit readiness.
• Able to collaborate effectively across IT, compliance, and infrastructure teams to implement secure configurations, remediate endpoint issues, and contribute to incident investigations when needed.
• Demonstrated commitment to continuous learning, staying current with emerging endpoint threats, tools, and industry best practices through training, certifications, or hands‑on experimentation.

Interpersonal Skills

• Strong communication and collaboration skills with the ability to work effectively across globally distributed, multi-disciplinary teams and interact confidently with both technical and non‑technical stakeholders.
• Proven ability to manage competing priorities, handle high‑pressure situations calmly, and deliver results with attention to detail and professionalism.
• Skilled in building relationships and credibility at all levels of the organization, with the ability to influence decisions, align stakeholders, and present complex information in business‑relevant terms.
• Demonstrated problem‑solving and conflict resolution abilities, with a consultative approach to challenges and a commitment to driving solutions forward.
• Positive, customer‑focused mindset with a strong sense of ownership, accountability, and follow‑through on tasks and commitments.

Other Skills & Competencies

• Proven ability to translate complex technical requirements into business‑relevant terms and communicate effectively with both technical and non‑technical audiences across diverse global teams.
• Demonstrated agility in adapting to changing priorities, business needs, or emerging threats, with a proactive mindset for identifying, assessing, and executing cybersecurity initiatives independently.
• Strong change management skills, with experience considering cultural, organizational, and operational impacts when implementing security controls, processes, or enterprise‑wide policies.
• Skilled in gathering, documenting, and aligning business, functional, and technical requirements to ensure that cybersecurity solutions meet organizational goals and constraints.
• Solid business and financial acumen, with experience developing business cases, contributing to operational and capital budgeting processes, and aligning security investments to measurable value and ROI.
• Committed to maintaining the confidentiality of sensitive information and operating with integrity and discretion; fluent in English with the ability to work effectively across cultures and geographies.

McCormick & Company is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law.

As a general policy, McCormick does not offer employment visa sponsorships upon hire or in the future.