Cloud Security Engineer II

About the Position

McCormick & Company, Inc., a world leader in the spice, flavor, and seasonings industry, is seeking a full-time Cloud Security Engineer II to join our Technology and Engineering team in Gurgaon, India. This position will report to the Sr. Manager Cybersecurity - Technology and Engineering.

The Cloud Security Engineer is an individual contributor role focused on improving the security posture of McCormick’s cloud environments. The role will help implement and operate cloud-native security controls, identify and reduce cloud risk, and enable secure adoption of cloud services.

Working closely with cloud platform, infrastructure, DevOps, application, identity, and Security Operations teams, this engineer will support secure cloud configurations, identity and access controls, posture management, automation, and remediation of security findings.

This role is suited to a hands-on cloud security professional with strong practical knowledge of one primary cloud platform and the ability to collaborate effectively across a global organization.

Responsibilities

• Operate and improve cloud security posture management capabilities, including visibility of cloud assets, configuration risks, vulnerabilities, and policy compliance. Prioritize findings based on business impact and risk, and work with cloud and application teams to drive remediation.
• Design, implement, and maintain practical cloud security standards, guardrails, and baseline configurations for identity, networking, storage, compute, logging, encryption, and workload protection. Help prevent security drift through policy enforcement and repeatable secure configuration patterns.
• Support least-privilege access across cloud environments by identifying excessive permissions, inactive identities, risky access paths, and service-account risks. Partner with IAM and platform teams on access reviews, privileged access, and secure identity design.
• Partner with cloud platform, infrastructure, and DevOps teams to embed security controls into infrastructure-as-code and deployment workflows. Develop or enhance automation that improves control coverage, reduces manual effort, and enables timely remediation.
• Help improve cloud security monitoring, alert quality, and investigation readiness through cloud-native logging, security tooling, and integrations with the SIEM and Security Operations teams. Support investigation and remediation of significant cloud security findings, while SOC retains primary incident-response ownership.
• Provide cloud security input for new services, migrations, and significant design changes. Review proposed architectures against established patterns and identify practical controls for secure deployment, data protection, segmentation, resilience, and regulatory requirements.
• Maintain cloud security documentation, standards, exceptions, and operating procedures. Track control coverage, remediation progress, policy compliance, and key risk trends; provide concise updates to management and recommend improvements to cloud security capabilities.
• Participate in internal workshops and architecture review boards for cloud platforms.
• Maintain certifications and hands-on experience in evolving cloud technologies.

Requirements

• Bachelor’s degree in information technology, Computer Science, or a relevant field.
• Relevant cloud or security certifications are preferred, such as Microsoft Azure, AWS, Google Cloud, CCSP, Security+, or equivalent credentials.
• Three to six years of experience in cloud security, cloud engineering, systems administration, security engineering, or a related technical role.
• Hands-on experience securing at least one major cloud platform, such as Microsoft Azure, AWS, or Google Cloud Platform.
• Experience with cloud security posture management, cloud-native security services, configuration baselines, vulnerability management, and identity and access management.
• Working knowledge of cloud networking, encryption, logging, monitoring, and secure workload configuration.
• Experience supporting infrastructure-as-code, policy-as-code, CI/CD, or cloud automation is preferred.
• Scripting or automation experience using PowerShell, Python, Terraform, or similar technologies is preferred.
• Familiarity with security frameworks and standards, such as NIST CSF, CIS Benchmarks, ISO 27001, and cloud-provider security guidance.
• Comprehensive technical knowledge of all areas within IT plus a comprehensive understanding of all business functions and how their processes and resources interact is required.

Nice to Have

• Experience with Microsoft Azure, AWS, or Google Cloud.
• Knowledge of PowerShell, Python, or Terraform.

We Offer

• Opportunity to be part of a global organization with a 130-year history of leadership and integrity.
• Competitive and comprehensive benefits.
• Culture built on respect and opportunities for growth.

About the Company

McCormick & Company, Inc. is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law.

As a general policy, McCormick does not offer employment visa sponsorships upon hire or in the future.

Apply now »