Software Engineer II– Sites & Services

COMPANY OVERVIEW

We exist to make food the world loves. But we do more than that. Our company is a place that prioritizes being a force for good, a place to expand learning, explore new perspectives and reimagine new possibilities, every day. We look for people who want to bring their best — bold thinkers with big hearts who challenge one another and grow together. Because becoming the undisputed leader in food means surrounding ourselves with people who are hungry for what’s next.​

OVERVIEW

This role is part of the EDC Sites & Services team focused on building, supporting, and securing scalable, maintainable websites, integrations, and platform services across modern and legacy ecosystems.

The individual will take ownership of analyzing security findings, troubleshooting root causes, and implementing fixes in code, configuration, dependencies, integrations, and platform setup. With strong technical depth across web and enterprise technologies, they will contribute hands-on to secure implementation, production support, issue resolution, and deployment of fixes and enhancements across the development lifecycle.

The candidate will actively contribute to vulnerability remediation, debugging, performance tuning, release hardening, and production support while ensuring solutions are secure, maintainable, and aligned with long-term business needs.

KEY ACCOUNTABILITIES

Project Leadership & Execution

• Own delivery of remediation tasks, code changes, and security fixes across websites, applications, APIs, integrations, and cloud-hosted services

• Troubleshoot issues, identify root causes, and implement fixes across code, configuration, dependencies, and platform controls

• Support secure testing, validation, release, and deployment of fixes and enhancements across environments

• Contribute to production support, incident resolution, and platform hardening activities

• Participate in requirement analysis, issue clarification, and technical discussions with stakeholders and partner teams

• Conduct code reviews and contribute to secure coding and implementation best practices

• Support debugging, performance tuning, and maintainability improvements across components and platforms

Learning, Development & Mentoring

• Proactively learn and apply secure development practices, tools, and technologies relevant to project needs

• Contribute to knowledge sharing on secure coding, vulnerability remediation, and engineering best practices

• Support team capability building through practical guidance on recurring risks, preventive controls, and effective implementation approaches

• Continue to strengthen technical depth across web, integration, and cloud platforms

Technical Consulting & Strategy

• Provide practical technical solutions for remediation and secure implementation tasks

• Contribute to technical design discussions with focus on secure, scalable, and maintainable solutions

• Apply knowledge of application security, platform architecture, APIs, integrations, and deployment practices to solve complex problems

• Contribute to implementation standards, reusable patterns, and preventive improvements for future releases

MINIMUM QUALIFICATIONS

• Education: Bachelor's degree in computers or related engineering field

• Experience: 6-8 years as a software developer experience in high-stakes environment

• Technical Skills:

• Hands-on experience in software engineering, web application development, or security-focused development

• Strong understanding of common web and application security vulnerabilities and mitigation approaches

• Experience troubleshooting, fixing, testing, and deploying code or configuration changes across applications, APIs, integrations, or cloud-hosted services

• Ability to debug issues across front-end, APIs, integrations, configuration, and platform components

• Proactively drives issue resolution, demonstrates strong ownership, and manages multiple priorities effectively

• Strong working knowledge of enterprise application architecture and technical toolsets to solve engineering problems

• Soft Skills:

• Demonstrates the ability to independently own and execute module-level remediation, development, and support tasks

• Strong communication and collaboration skills across engineering, product, operations, and cyber security teams

PREFERRED QUALIFICATIONS

• Experience with JavaScript or TypeScript ecosystems including Next.js and ReactJS

• Experience with .NET applications, SQL-based systems, API security, and integration platforms such as MuleSoft

• Familiarity with GCP services, cloud configuration review, secrets handling, logging or monitoring controls, CI/CD workflows, and deployment practices

• Understanding of OWASP Top 10, secure SDLC practices, vulnerability management workflows, and remediation validation

• Experience in code reviews, technical design discussions, production support, performance tuning, and CI/CD-based delivery

• Experience working in cross-functional enterprise delivery teams

• Relevant certifications such as Security+, CEH, or cloud security certifications are a plus

• Knowledge of, familiarity with, or experience supporting CMS-driven digital ecosystems, especially Sitecore XM Cloud and legacy Sitecore environments

ELIGIBILITY

Applicants must meet minimum age qualifications in the country in which the job is located.

New possibilities.
Bold thinking.
Real heart.
Build remarkable brands with remarkable people.

At General Mills, we make food the world loves. Across 100+ markets, we come together to create, innovate and grow.

Here, you’ll do meaningful work and help to lead the future of food at a company that stands for good.

See what's possible

Watch with captions in other languages here.

Learn more about us

• Our careers
• Our company

Create job alerts

Set up job alerts to receive instant email notifications for new openings matching your interests.

• Sign in or create an account

Stay connected

Join our talent community to hear about company news and career opportunities.

• Sign up

Beware of recruitment scams and fraud

Protect yourself against recruitment fraud. Unauthorized individuals may pose as General Mills recruiters, make contact about job opportunities, post fake job openings, or even extend job offers. When in doubt, please ignore these messages. When reviewing a General Mills job posting on a non-General Mills site, such as LinkedIn, it is important to always verify that the job is also listed on the General Mills Career site. Only jobs listed on our Career site are legitimate.