Cloud Security Engineer II
McCormick & Company, Incorporated1 month ago
Gurgaon, IndiaMid Level / Senior
Responsibilities
- Operate and improve cloud security posture management, including asset visibility, configuration risk, vulnerability, and policy-compliance tracking.
- Design, implement, and maintain cloud security standards, guardrails, baseline configurations, and policy enforcement for identity, networking, storage, compute, logging, encryption, and workload protection.
- Identify excessive permissions, inactive identities, risky access paths, and service-account risks, and partner with IAM and platform teams on secure identity design and access reviews.
- Embed security controls into infrastructure-as-code and deployment workflows and develop automation for control coverage and remediation.
- Improve cloud security monitoring, alert quality, investigation readiness, and integrations with SIEM and Security Operations teams.
- Provide security input for cloud services, migrations, architecture changes, secure deployment, data protection, segmentation, resilience, and regulatory requirements.
- Maintain cloud security documentation, standards, exceptions, operating procedures, control coverage metrics, and risk updates.
- Participate in cloud platform workshops and architecture review boards.
Requirements
- Bachelor’s degree in information technology, computer science, or a relevant field.
- Three to six years of experience in cloud security, cloud engineering, systems administration, security engineering, or a related technical role.
- Hands-on experience securing at least one major cloud platform, such as Microsoft Azure, AWS, or Google Cloud Platform.
- Experience with cloud security posture management, cloud-native security services, configuration baselines, vulnerability management, and identity and access management.
- Working knowledge of cloud networking, encryption, logging, monitoring, and secure workload configuration.
- Preferred experience with infrastructure-as-code, policy-as-code, CI/CD, cloud automation, PowerShell, Python, or Terraform.
- Preferred cloud or security certifications such as Microsoft Azure, AWS, Google Cloud, CCSP, Security+, or equivalent credentials.
- Familiarity with NIST CSF, CIS Benchmarks, ISO 27001, and cloud-provider security guidance.
- Strong analytical, problem-solving, communication, collaboration, prioritization, confidentiality, and continuous-improvement skills.
- English fluency is critical.
About McCormick & Company, Incorporated
McCormick & Company, Incorporated manufactures and markets spices, seasoning blends, condiments, and flavor solutions for consumers, food manufacturers, and foodservice operators. It sells both branded products for retail and custom flavor systems for B2B customers, distributing to more than 150 countries. Founded in 1889 and headquartered in Hunt Valley, Maryland, McCormick is a public company traded on the NYSE (MKC).