Cybersecurity Analyst, Offensive Security

At McCormick, we bring our passion for flavor to work each day. We encourage growth, respect everyone's contributions and do what's right for our business, our people, our communities and our planet. Join us on our quest to make every meal and moment better.

Founded in Baltimore, MD in 1889 in a room and a cellar by 25-year-old Willoughby McCormick with three employees, McCormick is a global leader in flavour. With over 14,000 employees around the world and more than $6 Billion in annual sales, the Company manufactures, markets, and distributes spices, seasoning mixes, condiments and other flavourful products to the entire food industry, retail outlets, food manufactures, food service businesses and consumers.

While our global headquarters are in the Baltimore, Maryland, USA area, McCormick operates and serves customers from nearly 60 locations in 25 countries and 170 markets in Asia-Pacific, China, Europe, Middle East and Africa, and the Americas, including North, South and Central America.

Responsibilities

• Support authorized penetration testing, purple team, and AI security assessment activities under senior team direction.
• Perform reconnaissance, vulnerability validation, basic attack-path analysis, and controlled testing within approved rules of engagement.
• Assist with testing web applications, cloud environments, identity platforms, networks, endpoints, and assigned technologies.
• Collect and document technical evidence, findings, affected assets, and recommended remediation actions.
• Support validation of detection use cases and control gaps with Threat Detection and Response partners.
• Maintain testing tools, scripts, documentation, and awareness of emerging vulnerabilities and offensive security techniques.

Required Qualifications

• Bachelor's degree in computer science, information security, related degree, or measurable knowledge from serving in industry/military/government unit.
• Relevant certifications such as Security+, eJPT, PNPT, CEH, cloud security certifications, or equivalent demonstrated knowledge are preferred.
• 1-5 years’ professional experience working in cybersecurity or information technology
• Foundational knowledge of penetration testing, vulnerability assessment, threat modeling, or security testing methodologies.
• Working knowledge of operating systems, networking, web technologies, cloud platforms, and enterprise identity concepts.
• Ability to analyze technical issues, validate security findings, and communicate risk clearly to technical audiences.
• Familiarity with common security tools and scripting languages, such as Python, PowerShell, Bash, or similar.
• Exposure to application, cloud, network, identity, OT, or AI security is preferred.

As a general policy, McCormick does not offer employment visa sponsorships upon hire or in the future. 

McCormick & Company is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law.