Cloud Security Engineer II

At McCormick, we bring our passion for flavor to work each day. We encourage growth, respect everyone's contributions and do what's right for our business, our people, our communities and our planet. Join us on our quest to make every meal and moment better.   Founded in Baltimore, MD in 1889 in a room and a cellar by 25-year-old Willoughby McCormick with three employees, McCormick is a global leader in flavour. With over 14,000 employees around the world and more than $6 Billion in annual sales, the Company manufactures, markets, and distributes spices, seasoning mixes, condiments and other flavourful products to the entire food industry, retail outlets, food manufactures, food service businesses and consumers.   While our global headquarters are in the Baltimore, Maryland, USA area, McCormick operates and serves customers from nearly 60 locations in 25 countries and 170 markets in Asia-Pacific, China, Europe, Middle East and Africa, and the Americas, including North, South and Central America

McCormick & Company, Inc., a world leader in the spice, flavor and seasonings industry, is seeking a full time Cloud Security Engineer – Technology and Engineering. This position will report to the Sr. Manager Cybersecurity - Technology and Engineering. Position Overview: The Cloud Security Engineer is an individual contributor role focused on improving the security posture of McCormick’s cloud environments. The role will help implement and operate cloud-native security controls, identify and reduce cloud risk, and enable secure adoption of cloud services. Working closely with cloud platform, infrastructure, DevOps, application, identity, and Security Operations teams, this engineer will support secure cloud configurations, identity and access controls, posture management, automation, and remediation of security findings. This role is suited to a hands-on cloud security professional with strong practical knowledge of one primary cloud platform and the ability to collaborate effectively across a global organization.  This is an opportunity to help shape and mature cloud security capabilities in a global organization. The role will directly contribute to secure cloud adoption, improved visibility of cloud risk, stronger governance, and more efficient remediation through practical security automation and engineering partnerships.    Key Responsibilities: Description •    Operate and improve cloud security posture management capabilities, including visibility of cloud assets, configuration risks, vulnerabilities, and policy compliance. Prioritize findings based on business impact and risk, and work with cloud and application teams to drive remediation. •    Design, implement, and maintain practical cloud security standards, guardrails, and baseline configurations for identity, networking, storage, compute, logging, encryption, and workload protection. Help prevent security drift through policy enforcement and repeatable secure configuration patterns. •    Support least-privilege access across cloud environments by identifying excessive permissions, inactive identities, risky access paths, and service-account risks. Partner with IAM and platform teams on access reviews, privileged access, and secure identity design. •    Partner with cloud platform, infrastructure, and DevOps teams to embed security controls into infrastructure-as-code and deployment workflows. Develop or enhance automation that improves control coverage, reduces manual effort, and enables timely remediation. •    Help improve cloud security monitoring, alert quality, and investigation readiness through cloud-native logging, security tooling, and integrations with the SIEM and Security Operations teams. Support investigation and remediation of significant cloud security findings, while SOC retains primary incident-response ownership. •    Provide cloud security input for new services, migrations, and significant design