Software Engineer II Sites And Services

General Mills; Mumbai; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

General Mills in Mumbai seeks a security-focused software engineer to lead remediation tasks across websites, APIs, and cloud services. You will own debugging, secure coding practices, and collaborate with cross-functional teams to deliver secure, scalable solutions for enterprise platforms.

The role requires 6–8 years of experience in software development with a strong understanding of application security, OWASP Top 10, and secure SDLC principles.

Qualifications

• Education: Bachelor's degree in Computers or related engineering.
• Experience: 6-8 years in software development in a high-stakes environment.
• Hands-on experience in software engineering, web app development, or security-focused development.
• Knowledge of OWASP Top 10, secure SDLC practices, vulnerability management.
• Ability to debug across frontend, APIs, integrations, configuration, and platform components.
• Proactive ownership and ability to manage multiple priorities.
• Strong communication and collaboration across engineering, product, operations, and cyber security teams.

Responsibilities

• Own delivery of remediation tasks across websites, applications, APIs, integrations, and cloud-hosted services.
• Troubleshoot issues, identify root causes, and implement fixes across code, configuration, dependencies, and platform controls.
• Support secure testing, validation, release, and deployment of fixes and enhancements across environments.
• Contribute to production support, incident resolution, and platform hardening activities.
• Participate in requirement analysis, issue clarification, and technical discussions with stakeholders and partner teams.
• Conduct code reviews and contribute to secure coding and implementation best practices.
• Support debugging, performance tuning, and maintainability improvements across components and platforms.

Skills

Hands-on software dev

Security-focused dev

Debugging

Ownership

Cross-functional teamwork

Education

Bachelors in CS/Eng

Tools

.NET

Next.js

ReactJS

SQL

MuleSoft

GCP

Job description

Job Description:

Company Overview

We exist to make food the world loves. But we do more than that. Our company is a place that prioritizes being a force for good, a place to expand learning, explore new perspectives and reimagine new possibilities, every day. We look for people who want to bring their best — bold thinkers with big hearts who challenge one another and grow together. Because becoming the undisputed leader in food means surrounding ourselves with people who are hungry for what’s next.

Overview

This role is part of the EDC Sites & Services team focused on building, supporting, and securing scalable, maintainable websites, integrations, and platform services across modern and legacy ecosystems.

The individual will take ownership of analyzing security findings, troubleshooting root causes, and implementing fixes in code, configuration, dependencies, integrations, and platform setup. With strong technical depth across web and enterprise technologies, they will contribute hands‑on to secure implementation, production support, issue resolution, and deployment of fixes and enhancements across the development lifecycle.

The candidate will actively contribute to vulnerability remediation, debugging, performance tuning, release hardening, and production support while ensuring solutions are secure, maintainable, and aligned with long-term business needs.

Key Accountabilities

Project Leadership & Execution

• Own delivery of remediation tasks, code changes, and security fixes across websites, applications, APIs, integrations, and cloud-hosted services
• Troubleshoot issues, identify root causes, and implement fixes across code, configuration, dependencies, and platform controls
• Support secure testing, validation, release, and deployment of fixes and enhancements across environments
• Contribute to production support, incident resolution, and platform hardening activities
• Participate in requirement analysis, issue clarification, and technical discussions with stakeholders and partner teams
• Conduct code reviews and contribute to secure coding and implementation best practices
• Support debugging, performance tuning, and maintainability improvements across components and platforms

Learning, Development & Mentoring

• Proactively learn and apply secure development practices, tools, and technologies relevant to project needs
• Contribute to knowledge sharing on secure coding, vulnerability remediation, and engineering best practices
• Support team capability building through practical guidance on recurring risks, preventive controls, and effective implementation approaches
• Continue to strengthen technical depth across web, integration, and cloud platforms

Technical Consulting & Strategy

• Provide practical technical solutions for remediation and secure implementation tasks
• Contribute to technical design discussions with focus on secure, scalable, and maintainable solutions
• Apply knowledge of application security, platform architecture, APIs, integrations, and deployment practices to solve complex problems
• Contribute to implementation standards, reusable patterns, and preventive improvements for future releases

Minimum Qualifications

• Education: Bachelor's degree in computers or related engineering field
• Experience: 6-8 years as a software developer experience in high-stakes environment
• Technical Skills:
• Hands‑on experience in software engineering, web application development, or security‑focused development
• Strong understanding of common web and application security vulnerabilities and mitigation approaches
• Experience troubleshooting, fixing, testing, and deploying code or configuration changes across applications, APIs, integrations, or cloud-hosted services
• Ability to debug issues across front‑end, APIs, integrations, configuration, and platform components
• Proactively drives issue resolution, demonstrates strong ownership, and manages multiple priorities effectively
• Strong working knowledge of enterprise application architecture and technical toolsets to solve engineering problems
• Soft Skills:
• Demonstrates the ability to independently own and execute module‑level remediation, development, and support tasks
• Strong communication and collaboration skills across engineering, product, operations, and cyber security teams

Preferred Qualifications

• Experience with JavaScript or TypeScript ecosystems including Next.js and ReactJS
• Experience with .NET applications, SQL‑based systems, API security, and integration platforms such as MuleSoft
• Familiarity with GCP services, cloud configuration review, secrets handling, logging or monitoring controls, CI/CD workflows, and deployment practices
• Understanding of OWASP Top 10, secure SDLC practices, vulnerability management workflows, and remediation validation
• Experience in code reviews, technical design discussions, production support, performance tuning, and CI/CD‑based delivery
• Experience working in cross‑functional enterprise delivery teams
• Relevant certifications such as Security+, CEH, or cloud security certifications are a plus
• Knowledge of, familiarity with, or experience supporting CMS‑driven digital ecosystems, especially Sitecore XM Cloud and legacy Sitecore environments

ELIGIBILITY

Applicants must meet minimum age qualifications in the country in which the job is located.