Cyber Security Engineer: Threat Intelligence and Incident Response (HYBRID) MISSISSAUGA, ON, CA, L5S 1S7McCormick Canada continues its long track record of growth and is a respected leader in the spice, seasoning, flavouring and specialty food industry. Our consumer products division serves retail grocery customers and emerging channels with Club House, Billy Bee and McCormick products, while our Custom Flavour Solutions division serves food service distributors and other respected food manufacturers across Canada. It has been the foundation for McCormick's success for decades. We have created an unusually dedicated workforce by fostering a culture of respect, recognition, inclusion and collaboration based on the highest ethical values. Our commitment to our customers, our consumers and our employees is unsurpassed.
This role works with the team that defines the strategic vision, roadmap, principals and standards for McCormick’s Threat Intelligence and incident response capabilities. The scope of this role includes providing expertise and understanding of the threat landscape working with different teams to mitigate risk and understand the threats that might impact our business. Provide expert knowledge of Threat Intelligence process and technologies including VM, SIEM, SOC, threat hunting, Incident response, and cloud security. You will be involved in the evolution of our threat intelligence program as we build new capabilities and enhance current one’s for cloud security. Central to this is building the technology, processes and capabilities identify threats across the infrastructure both on premise and in the cloud. To accomplish this, you will work closely with our internal security teams, managed service providers and other partners to help develop threat intelligence program that is resilient and supportable.




This position will provide the prospect to assist in monitoring and protecting McCormick cloud applications and infrastructure, local infrastructure, and physical locations against intrusion, hacking attempts, viruses, malware, and vulnerabilities. This role will be an integral part of our Security Operations Centre (SOC) aligned with our threat intelligence and incident response teams.
This position will also be responsible for working with other Security team members to respond to incidents, participate in security investigations and forensics, and lead, consult, and participate in IT projects and initiatives.
This role reports to the Director of Cyber Security Threat Intelligence and Incident ResponseResponsibilities:Assist with the development and maintenance of our security roadmap. Participate in the creation of enterprise security documents (policies, standards, baselines, guidelines and procedures) under the direction of the IT Security Leadership, where appropriate.
Assist with the identification of the tools, processes and controls required to effectively secure the McCormick enterprise ensuring the confidentiality, integrity and availability of the Company’s information assets. Work with security team to deploy and operate the threat intelligence tools and processesAssist with a variety of security applications and services such as Vulnerability management, SIEM, Firewalls, IDS/IPS, Content Filtering,



Anti-Malware, Anti-Virus, Forensic and Data Loss / Leakage tools. The escalation of threats and incidents to management and the development of recommendations based on incident findingsThreat hunting, forensics, and incident response is included in daily responsibilities.
Monitor and analyze traffic and events/alerts and advise on remediation actionsReview and assess impact and remediation actions for incidents escalated by Tier 1Investigate intrusion attempts and perform in-depth analysis of exploits by correlating various sources and determining which system or data set is affected.
Follow standard operating procedures for detecting, classifying, and reporting incidentsDemonstrate network expertise to support timely and effective decision making of when to declare an incidentConduct proactive threat researchAnalyze a variety of network and host-based security appliance logs (Firewalls, NIDS, HIDS, Sys Logs, etc.) to determine the correct remediation actions and escalation paths for each incidentIndependently follow procedures to identify, contain, analyze, document and eradicate malicious activityDocument all activities during an incident and provide leadership with status updates during the life cycle of the incidentEscalate information regarding intrusion events, security incidents, and other threat indications and warning information to the clientTrack trends and configure systems as required to reduce false positives from true events.
Assist with the development of processes and procedures to improve incident response times, analysis of incident, and overall SOC functionsProvide written analysis for monthly reports on an as-needed basisRequired

Qualifications:
Bachelor’s degree in Inform

📌 Cyber Security Engineer: Threat Intelligence And Incident Response (Canada)
🏢 McCormick, Incorporated
📍 Canada