Endpoint Security Engineer

McCormick & Company; Gurugram District; On-site; INR 1,800,000 - 2,600,000; Full time

Job summary

McCormick & Company is seeking an End Point Security Engineer to join a global security team responsible for protecting servers and endpoints across IT, OT, and cloud environments. You will implement and optimize security platforms, contribute to automation, and mentor engineers to uphold security standards.

The role emphasizes incident response, OS hardening, and governance alignment with risk frameworks, while enabling secure business operations and continuous improvement across regions.

Qualifications

• 3–6 years of hands-on endpoint security or cybersecurity engineering experience in enterprise environments.
• Proficient deploying and managing core endpoint security technologies across Windows; Linux experience is a plus.
• Experience with scripting to automate tasks and support configuration management.
• Familiar with NIST CSF, CIS Benchmarks, or ISO 27001 and audit readiness.
• Ability to collaborate with IT, compliance, and infrastructure teams and support investigations.

Responsibilities

• Provide strategic oversight during endpoint security incidents and drive root-cause analysis.
• Lead large-scale endpoint security initiatives across IT, OT, and cloud environments.
• Implement and continuously enhance endpoint security platforms and automation.
• Maintain OS hardening and enforce technical security standards.
• Support audit readiness and remediate endpoint risks with Legal/Compliance teams.
• Mentor engineers and contribute to tooling roadmaps and lifecycle planning.
• Collaborate across teams to enable secure business operations.

Skills

Endpoint security

Cybersecurity engineering

PowerShell

Python

EDR

Windows

Linux

Automation

NIST CSF

Education

CISSP or equivalent

Tools

EDR

Encryption

Patch management

Posture management

Job description

You may know McCormick as a leader in herbs, spices, seasonings, and condiments – and we’re only getting started on our journey to create flavors for the globe. At McCormick, we’re always looking for new people to bring their unique perspective to our team.

McCormick employees – all 14,000 of us across the world – are what makes this company a great place to work.

Position Overview

The End Point Security Engineer will be a member of a global team of security engineers, architects and practitioners who are enabling business growth and access to information, data, and services from anywhere with a security and risk minded approach. The role requires a broad range of knowledge, skills, and experience in IT (Information Technology) and IT security, focused on the servers and endpoints and other environments to ensure security is incorporated into all components of our environment as per our standards and aligned to our risk framework.

Key Responsibilities

• Provide strategic oversight during endpoint-related security incidents, guide root cause analysis, and drive process improvements through ITSM and tooling enhancements.
• Deliver and manage large-scale endpoint security engineering initiatives across IT, OT, and cloud environments, ensuring alignment with business and cybersecurity strategy.
• Implement, operate, and continuously enhance endpoint security platforms (e.g., EDR/XDR, device control, encryption, vulnerability agents), including automation and validation of security posture.
• Lead configuration lifecycle management, OS hardening, enforcement of technical standards, and scalable endpoint security architecture practices.
• Drive compliance integration into endpoint engineering workflows, support audit readiness, and remediate endpoint-related risks in partnership with Legal and Compliance teams.
• Contribute to innovation through automation, orchestration, peer reviews, documentation updates, and cross-team collaboration while mentoring engineers and supporting secure business enablement.
• Support strategic planning activities including tooling roadmaps, upgrade cycles, lifecycle renewals, resource modeling, and continuous improvement initiatives.

Additional/Secondary Responsibilities

• Provide incident response, technology and troubleshooting support when needed.
• Other duties as assigned.

Required Qualifications

Certifications and/or Licenses: One or More of: GIAC Certified, CCSK, OCSP, CISSP (Certified Information Systems Security Professional), CEH, ITIL, CCNS, CISC, CPFA, RHCE, Microsoft Certification, Security+, or other related security certification

Experience

• 3–6 years of hands‑on experience in endpoint security, cybersecurity engineering, or systems administration within enterprise environments, with a strong understanding of endpoint threats, tools, and operational requirements.
• Proficient in deploying and managing core endpoint security technologies, including EDR, antivirus, encryption, patching, and posture management solutions across Windows platforms; experience with Linux is a plus.
• Comfortable using scripting languages such as PowerShell or Python to automate operational tasks, streamline compliance checks, and support configuration management efforts.
• Familiar with cybersecurity standards and control frameworks such as NIST CSF, CIS Benchmarks, or ISO 27001, with practical experience supporting compliance initiatives and audit readiness.
• Able to collaborate effectively across IT, compliance, and infrastructure teams to implement secure configurations, remediate endpoint issues, and contribute to incident investigations when needed.
• Demonstrated commitment to continuous learning, staying current with emerging endpoint threats, tools, and industry best practices through training, certifications, or hands‑on experimentation.

Interpersonal Skills

• Strong communication and collaboration skills with the ability to work effectively across globally distributed, multi-disciplinary teams and interact confidently with both technical and non-technical stakeholders.
• Proven ability to manage competing priorities, handle high-pressure situations calmly, and deliver results with attention to detail and professionalism.
• Skilled in building relationships and credibility at all levels of the organization, with the ability to influence decisions, align stakeholders, and present complex information in business‑relevant terms.
• Demonstrated problem‑solving and conflict resolution abilities, with a consultative approach to challenges and a commitment to driving solutions forward.
• Positive, customer‑focused mindset with a strong sense of ownership, accountability, and follow‑through on tasks and commitments.

Other Skills & Competencies

• Proven ability to translate complex technical requirements into business-relevant terms and communicate effectively with both technical and non-technical audiences across diverse global teams.
• Demonstrated agility in adapting to changing priorities, business needs, or emerging threats, with a proactive mindset for identifying, assessing, and executing cybersecurity initiatives independently.
• Strong change management skills, with experience considering cultural, organizational, and operational impacts when implementing security controls, processes, or enterprise-wide policies.
• Skilled in gathering, documenting, and aligning business, functional, and technical requirements to ensure that cybersecurity solutions meet organizational goals and constraints.
• Solid business and financial acumen, with experience developing business cases, contributing to operational and capital budgeting processes, and aligning security investments to measurable value and ROI.
• Committed to maintaining the confidentiality of sensitive information and operating with integrity and discretion; fluent in English with the ability to work effectively across cultures and geographies.