Software Engineer II – Sites & Services

General Mills; Mumbai; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

General Mills is seeking an experienced software security engineer in Mumbai to own remediation tasks across websites, APIs, and cloud services. You will troubleshoot, fix, and deploy secure changes while collaborating with stakeholders.

The role emphasizes secure development practices, production support, and platform hardening, with a focus on modern web tech including Next.js and ReactJS in a Sitecore XM Cloud environment.

Qualifications

• Bachelor's degree in computers or related engineering field
• 6-8 years software development experience in high-stakes environment
• Strong knowledge of web/app security vulnerabilities and mitigations
• Experience troubleshooting, fixing, testing, and deploying code or configuration changes
• Ability to debug across frontend, APIs, integrations, configurations, and platform components
• Proven ownership and ability to manage multiple priorities

Responsibilities

• Lead remediation tasks, code changes, and security fixes across websites, APIs, and cloud-hosted services
• Troubleshoot issues, identify root causes, implement fixes
• Support secure testing, validation, release, and deployment of fixes
• Contribute to production support, incident resolution, and platform hardening
• Participate in requirement analysis and technical discussions with stakeholders
• Conduct code reviews and promote secure coding practices
• Assist in knowledge sharing on secure coding and remediation

Skills

JavaScript/TypeScript

Next.js

ReactJS

.NET

SQL

API security

CI/CD

Troubleshooting

Secure coding

Education

Bachelor's degree in Computer Science/Engineering

Tools

MuleSoft

Sitecore XM Cloud

GCP

Job description

COMPANY OVERVIEWWe exist to make food the world loves. But we do more than that. Our company is a place that prioritizes being a force for good, a place to expand learning, explore new perspectives and reimagine new possibilities, every day. We look for people who want to bring their best — bold thinkers with big hearts who challenge one another and grow together. Because becoming the undisputed leader in food means surrounding ourselves with people who are hungry for what’s next.OVERVIEWThis role is part of the EDC Sites & Services team focused on building, supporting, and securing scalable, maintainable websites, integrations, and platform services across modern and legacy ecosystems.The individual will take ownership of analyzing security findings, troubleshooting root causes, and implementing fixes in code, configuration, dependencies, integrations, and platform setup. With strong technical depth across web and enterprise technologies, they will contribute hands-on to secure implementation, production support, issue resolution, and deployment of fixes and enhancements across the development lifecycle.The candidate will actively contribute to vulnerability remediation, debugging, performance tuning, release hardening, and production support while ensuring solutions are secure, maintainable, and aligned with long-term business needs.KEY ACCOUNTABILITIESProject Leadership & ExecutionOwn delivery of remediation tasks, code changes, and security fixes across websites, applications, APIs, integrations, and cloud-hosted servicesTroubleshoot issues, identify root causes, and implement fixes across code, configuration, dependencies, and platform controlsSupport secure testing, validation, release, and deployment of fixes and enhancements across environmentsContribute to production support, incident resolution, and platform hardening activitiesParticipate in requirement analysis, issue clarification, and technical discussions with stakeholders and partner teamsConduct code reviews and contribute to secure coding and implementation best practicesSupport debugging, performance tuning, and maintainability improvements across components and platformsLearning, Development & MentoringProactively learn and apply secure development practices, tools, and technologies relevant to project needsContribute to knowledge sharing on secure coding, vulnerability remediation, and engineering best practicesSupport team capability building through practical guidance on recurring risks, preventive controls, and effective implementation approachesContinue to strengthen technical depth across web, integration, and cloud platformsTechnical Consulting & StrategyProvide practical technical solutions for remediation and secure implementation tasksContribute to technical design discussions with focus on secure, scalable, and maintainable solutionsApply knowledge of application security, platform architecture, APIs, integrations, and deployment practices to solve complex problemsContribute to implementation standards, reusable patterns, and preventive improvements for future releasesMINIMUM QUALIFICATIONSEducation: Bachelor's degree in computers or related engineering fieldExperience: 6-8 years as a software developer experience in high-stakes environmentTechnical Skills:Hands-on experience in software engineering, web application development, or security-focused developmentStrong understanding of common web and application security vulnerabilities and mitigation approachesExperience troubleshooting, fixing, testing, and deploying code or configuration changes across applications, APIs, integrations, or cloud-hosted servicesAbility to debug issues across front-end, APIs, integrations, configuration, and platform componentsProactively drives issue resolution, demonstrates strong ownership, and manages multiple priorities effectivelyStrong working knowledge of enterprise application architecture and technical toolsets to solve engineering problemsSoft Skills:Demonstrates the ability to independently own and execute module-level remediation, development, and support tasksStrong communication and collaboration skills across engineering, product, operations, and cyber security teamsPREFERRED QUALIFICATIONSExperience with JavaScript or TypeScript ecosystems including Next.js and ReactJSExperience with .NET applications, SQL-based systems, API security, and integration platforms such as MuleSoftFamiliarity with GCP services, cloud configuration review, secrets handling, logging or monitoring controls, CI/CD workflows, and deployment practicesUnderstanding of OWASP Top 10, secure SDLC practices, vulnerability management workflows, and remediation validationExperience in code reviews, technical design discussions, production support, performance tuning, and CI/CD-based deliveryExperience working in cross-functional enterprise delivery teamsRelevant certifications such as Security+, CEH, or cloud security certifications are a plusKnowledge of, familiarity with, or experience supporting CMS-driven digital ecosystems, especially Sitecore XM Cloud and legacy Sitecore environmentsELIGIBILITYApplicants must meet minimum age qualifications in the country in which the job is located.