OT Cybersecurity Engineer (HYBRID)

You may know McCormick as a leader in herbs, spices, seasonings, and condiments – and we’re only getting started. At McCormick, we’re always looking for new people to bring their unique flavor to our team.

McCormick employees – all 14,000 of us across the world – are what makes this company a great place to work.

 

We are looking to hire an OT Cybersecurity Engineer immediately in a Hybrid (50/50) capacity at our Global Headquarters in Hunt Valley, Maryland. 

 

What We Bring To The Table:

The best people deserve the best rewards. In addition to the benefits you’d expect from a global leader (401k, health insurance, paid time off, etc.) we also offer:

• Competitive compensation

• Career growth opportunities

• Flexibility and Support for Diverse Life Stages and Choices

• Wellbeing programs including Physical, Mental and Financial wellness

• Tuition assistance

   

 

 

 

 

 

McCormick & Company, Inc., a world leader in the spice, flavor and seasonings industry, is seeking a full time OT Security Engineer – Technology and Engineering. This position will report to the Sr. Manager Cybersecurity - Technology and Engineering.

 

Position Overview:

 

The OT Security Engineer role is focused on securing operational technology (OT) environments by managing and supporting industrial cybersecurity tools, ensuring secure access, and maintaining robust network segmentation. This role is essential in protecting critical infrastructure by enabling safe connectivity and minimizing risk across plants, manufacturing and production systems.

 

As a technical specialist, the OT security engineer is responsible for designing, implementing, managing and optimizing OT security technologies. This role also supports incident response efforts, evaluates segmentation controls, and collaborates with plant engineers, IT and cyber security teams to implement and maintain effective security measures in line with industrial standards such as ISA/IEC 62443.

 

This is a hands-on position that blends security expertise with operational awareness to safeguard core industrial systems in a dynamic, real-world environment and holding the values of safety, reliability, availability, integrity, and confidentiality is essential for success in this role.

 

 

Key Responsibilities:

Description

• Implement, manage and maintain OT security tools and technologies such as firewalls, secure remote access, asset discovery platforms, and endpoint protection systems across our industrial networks.
• Work on implementing and supporting network segmentation strategies, helping to enforce proper separation between IT and OT networks.
• Set up and manage secure remote access solutions for vendors, support teams, and engineering staff—making sure access is always controlled and monitored.
• Review and clean up firewall rules, user access permissions, and other configurations to reduce exposure and enforce least privilege across OT systems.
• Adjust security baselines and hardening strategies based on current threat landscape and intelligence reports.
• Participate in the organization’s change management process to ensure that all changes to IT assets are evaluated for security impact and compliance.
• Ensure that OT security policies and procedures are compliant with industry standards, regulations, and internal security requirements. Assist in audit activities and produce regular security reports.
• Create and maintain clear documentation of site-specific configurations, SOPs, architecture diagrams, and change history.
• Assist in OT security incident response, analysis, and resolution to minimize business impact.
• Contribute to the continuous improvement of OT security practices, including recommending and implementing new security solutions and technologies.
• Collaborate with operations, engineering, and corporate security teams to make sure we stay aligned on standards and compliance requirements.
• Maintain thorough documentation for firewall rule sets, security configurations, procedures, and operational reports.

 

Required Qualifications:

 

• Bachelor’s degree in information technology, Computer Science or relevant field. Experience can be considered in lieu of degree.

• One or More of: Certified ISA/IEC 62443 Cybersecurity Practitioner (CCSP), Certified ISA/IEC 62443 Cybersecurity Expert (CCSE), GIAC Global Industrial Cyber Security Professional (GICSP), Certified Ethical Hacker (CEH), OCSP, Security+, Certified SCAD