Cyber Security Threat Intelligence Manager

About the job

You may know McCormick as a leader in herbs, spices, seasonings, and condiments – and we’re only getting started on our journey to create flavors for the globe. At McCormick, we’re always looking for new people to bring their unique perspective to our team.

McCormick employees – all 14,000 of us across the world – are what makes this company a great place to work.

We are looking to hire a Cyber Security Threat Intelligence (TI) and Hunt Program Manager to join our Cybersecurity Threat Management team. The Cyber TI and Hunt Program Manager, reporting to the Director of Cybersecurity Threat Management, will be responsible for the development and maturity of the TI and threat hunting capabilities to proactively identify and manage cybersecurity threats. Additionally, this person will assist the Director of Cybersecurity Threat Management with planning and execution of strategic security projects. This position can be based in Hunt Valley, MD or Lodz, PL or Gurgaon, IN. Remote may be considered on a case-by-case basis.

What We Bring To The Table

The best people deserve the best rewards. In addition to the benefits, you’d expect from a global leader (401k, health insurance, paid time off, etc.) we also offer:

• Competitive compensation
• Career growth opportunities
• Flexibility and Support for Diverse Life Stages and Choices
• We prioritize our communities and the planet we share. We are proud to be awarded as a Diversity Inc. Top 50 company for Diversity and have multiple Sustainability awards (ranking #22 in the World and #1 in Food Products)
• Wellbeing programs including Physical, Mental and Financial wellness
• Tuition assistance

Responsibilities

• Create, execute and maintain a comprehensive cyber threat intelligence and response strategy to protect the organization against emerging cyber threats.
• Provide direction and mentorship to cybersecurity analysts, incident responders and threat hunters.
• Oversee the evaluation, implementation, and management of cybersecurity technologies and tools to enhance the organization’s threat detection and response capabilities.
• Oversee the collection, analysis and sharing of cyber threat intelligence to identify potential threats and vulnerabilities and develop content within security tools to enhance the organization’s threat detection and response capabilities.
• Analyze security and abuse incidents to derive insight into attack vectors and tactics, techniques and procedures (TTPs).
• Collaborate with inter- and intra-departmental stakeholders to communicate risk indicators, share findings and threat intelligence, coordinate and prioritize remediation efforts and promote open dialog and foster alliances with working groups.
• Develop and enforce cybersecurity policies, procedures and standards to ensure the organization is compliant with relevant regulations and best practices.
• Create, track and iterate on the security metrics that measure the efficacy of our detection and response program.
• Prepare and communicate executive briefings and presentations on overall cyber threat risk posture, effectiveness of the threat management program and highlighting accomplishments related to program maturity.

Required Qualifications

• Bachelor's degree in computer science, information security, related degree, or measurable knowledge from serving in industry/military/government unit.
• GCIA, GCIH, CREM, GIAC, CTIA, CISSP or other relevant security professional certifications
• Minimum 5 years’ professional experience working in cybersecurity or information technology
• Minimum 3 years' experience in an incident response or security operations center role
• Proven experience working with cross-functional teams within a large organization
• Proven ability to successfully collaborate with business and technology leaders and teams
• Experience with threat intelligence platforms, security information and event management (SIEM) systems, managed detection and response (MDR/XDR) application management, Data Loss Prevention (DLP) monitoring and other related security applications.
• Ability to articulate complex technical information clearly and concisely to both technical and non-technical audiences.
• A strong understanding of cyber threat intelligence lifecycle and frameworks (e.g., MITRE ATT&CK, Cyber Kill Chain, NIST CSF, etc.).
• Proficiency in collecting, analyzing and synthesizing threat data from various sources (i.e., OSINT, ISAC, commercial threat feeds, dark web forums, etc.).

McCormick & Company is an equal opportunity/affirmative action employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law.