Apply on Employer Site

McCormick & Company · 7 hours ago

OT Incident Response Lead (HYBRID)

Hunt Valley, MD

Full-time

Hybrid

Mid, Senior Level

$104K/yr - $181K/yr

6+ years exp

McCormick & Company is a leader in herbs, spices, seasonings, and condiments, seeking to hire an OT Incident Response Lead for their Cybersecurity Threat Management team. This role involves executing threat detection, cyber incident response, and threat hunting activities within OT environments to ensure effective handling of security incidents.

Food Processing

No H1B

Hiring Manager

Nirmit Parikh, MBA

Responsibilities

Respond to cybersecurity incidents in OT environments, providing analysis and actionable recommendations to prevent recurrence

Collaborate with Threat Detection teams to enhance McCormick’s holistic threat detection strategy, ensuring presence of vital OT log sources

Develop strategies and perform threat hunting activities across OT networks to identify potential security risks early in the incident lifecycle

Partner with treat detection teams on data collaboratively with cybersecurity, IT, and OT teams to define and evolve incident response plans, playbooks, and documentation for OT environments

Lead and participate in tabletop exercises with cross-functional teams to assess and improve incident response readiness

Qualification

OT security principlesIncident response experienceThreat hunting activitiesGICSP certificationSplunk proficiencyICSSCADA knowledgeAnalytical skillsCollaboration skillsCommunication skills

Required

Bachelor's degree in cybersecurity, computer science, information security, related degree, or equivalent hand-on experience gained through industry, military, or government service in OT security roles

GICSP, GFCA, GNFA or other relevant security professional certifications

Minimum 6 years' professional experience working in incident response or threat hunting for OT environments

Proven ability to translate complex security incidents into business risk for non-technical stakeholders

Experience with tools like Splunk and Sentinel for threat analysis, anomaly detection, and event correlation

Extensive experience with OT security principles, ICS, SCADA, PLCs, HMIs, and Industrial protocols

Familiarity with industry regulations and security frameworks like NIST 800-82, IEC 62443, and Purdue Model architecture