Security Engineer; HYBRID

McCormick Canada continues its long track record of growth and is a respected leader in the spice, seasoning, flavouring and specialty food industry. Our consumer products division serves retail grocery customers and emerging channels with Club House, Billy Bee and McCormick products, while our Custom Flavour Solutions division serves food service distributors and other respected food manufacturers across Canada. McCormick Canada is part of the world leader in spice and seasonings, McCormick & Company Inc.

The Power of People is one of our five pillars. It has been the foundation for McCormick's success for decades. There is something inspiring about working  have created an unusually dedicated workforce by fostering a culture of respect, recognition, inclusion and collaboration based on the highest ethical values. Without our employees, our success is not possible. Our commitment to our customers, our consumers and our employees is unsurpassed.

Position Overview:

The security engineer role is responsible for the day-to-day management and support of core security technologies that protect endpoints, infrastructure, cloud and user access. This role plays a key part in strengthening the organization’s security posture by ensuring visibility, response, and configuration of tools like SIEM, EDR, endpoint security baseline and remote access platform.

Serving as a trusted expert across IT and security teams, the security engineer handles technology lifecycle tasks, support for incident response, and policy enforcement while maintaining alignment with internal standards and compliance frameworks. The role is also involved in managing firewalls and VPN configurations, improving tool coverage, and supporting continuous service improvement.

This position provides a unique opportunity to work hands-on with leading security platforms and contribute directly to business resilience and secure operations.

Key Responsibilities:

Description

• Take ownership of SIEM and fine-tune alerting rules, manage connectors, and make sure data and logs are flowing as expected.
• Manage EDR for Endpoint and Cloud— ensuring they’re properly configured, integrated, and monitored across all devices and environments.
• Help define, apply, and maintain security configuration baselines on endpoints using tools like Intune, Group Policy, and EDR policies.
• Keep track of where our security tools are deployed (and where they’re not), and work to improve tool coverage and consistency across the enterprise.
• Participate in the investigation of alerts from security platforms—working with SOC, infrastructure, or endpoint teams to support the resolution quickly.
• Provide day-to-day support and configuration management for employee remote access solutions, ensuring secure and seamless access.
• Review, manage, and optimize endpoint firewall and proxy rules —making sure we minimize risk while supporting business needs.
• Handle security technology lifecycle tasks like patching, upgrades, migrations, and tool retirement planning.
• Monitor new vulnerabilities in our security technology stack and work with other teams to get them resolved.
• Collaborate with infrastructure team, service providers, Dev Ops and application teams to ensure secure deployment of solutions and environment hardening.
• Stay aligned with internal standards and compliance frameworks like CIS and NIST.
• Work with IT, cloud, and other infrastructure teams to integrate security controls into deployments and services.
• Maintain documentation like SOPs, configuration guides, and exception logs to support operational continuity.
• Provide on call and/or after-hours support occasionally as needed.
• Participate in tool evaluations, new security projects, and ongoing improvements to our tech stack.
• Share insights and updates with management—on tool performance, incidents, risks, and opportunities for improvement.

Required Qualifications:

• Bachelor’s degree in information technology, Computer Science or relevant field.
• Two or More of: GIAC Certified, CCSK, OCSP, CISSP (Certified Information Systems Security Professional), Cloud Certified (AWS (Amazon Web Services), GCP, Azure), CEH, ITIL, CCNS, CISC, CPFA, RHCE,…