Software Engineer II– Sites & Services

Overview

Part of the EDC Sites & Services team, building, supporting and securing scalable, maintainable websites, integrations and platform services across modern and legacy ecosystems, with ownership of security findings, root-cause analysis and hands-on fixes.

What you'll do

• Own delivery of remediation tasks, code changes and security fixes across websites, applications, APIs, integrations and cloud-hosted services.
• Troubleshoot issues, identify root causes and implement fixes across code, configuration, dependencies and platform controls.
• Support secure testing, validation, release and deployment of fixes and enhancements across environments.
• Contribute to production support, incident resolution and platform hardening activities.
• Participate in requirement analysis, issue clarification and technical discussions with stakeholders and partner teams.
• Conduct code reviews and contribute to secure coding and implementation best practices.
• Support debugging, performance tuning and maintainability improvements across components and platforms.
• Proactively learn and apply secure development practices, tools and technologies relevant to project needs.
• Contribute to knowledge sharing on secure coding, vulnerability remediation and engineering best practices.
• Support team capability building through practical guidance on recurring risks, preventive controls and implementation approaches.
• Provide practical technical solutions for remediation and secure implementation tasks.
• Contribute to technical design discussions with focus on secure, scalable and maintainable solutions.
• Contribute to implementation standards, reusable patterns and preventive improvements for future releases.

What you'll need

• Bachelor's degree in computers or related engineering field.
• 6-8 years as a software developer in a high-stakes environment.
• Hands-on experience in software engineering, web application development or security-focused development.
• Strong understanding of common web and application security vulnerabilities and mitigation approaches.
• Experience troubleshooting, fixing, testing and deploying code or configuration changes across applications, APIs, integrations or cloud-hosted services.
• Ability to debug issues across front-end, APIs, integrations, configuration and platform components.
• Proactively drives issue resolution, demonstrates strong ownership and manages multiple priorities effectively.
• Strong working knowledge of enterprise application architecture and technical toolsets to solve engineering problems.
• Demonstrates the ability to independently own and execute module-level remediation, development and support tasks.
• Strong communication and collaboration skills across engineering, product, operations and cyber security teams.

Nice to have

• Experience with JavaScript or TypeScript ecosystems including Next.js and ReactJS.
• Experience with .NET applications, SQL-based systems, API security and integration platforms such as MuleSoft.
• Familiarity with GCP services, cloud configuration review, secrets handling, logging or monitoring controls, CI/CD workflows and deployment practices.
• Understanding of OWASP Top 10, secure SDLC practices, vulnerability management workflows and remediation validation.
• Experience in code reviews, technical design discussions, production support, performance tuning and CI/CD-based delivery.
• Experience working in cross-functional enterprise delivery teams.
• Relevant certifications such as Security+, CEH or cloud security certifications.
• Knowledge of, familiarity with, or experience supporting CMS-driven digital ecosystems, especially Sitecore XM Cloud and legacy Sitecore environments.

Details

• Location: Powai, Mumbai, MH.
• Applicants must meet minimum age qualifications in the country in which the job is located.