Software Engineer II – Sites & Services

This role is part of the EDC Sites & Services team focused on building, supporting, and securing scalable, maintainable websites, integrations, and platform services across modern and legacy ecosystems.

The individual will take ownership of analyzing security findings, troubleshooting root causes, and implementing fixes in code, configuration, dependencies, integrations, and platform setup. With strong technical depth across web and enterprise technologies, they will contribute hands-on to secure implementation, production support, issue resolution, and deployment of fixes and enhancements across the development lifecycle.

The candidate will actively contribute to vulnerability remediation, debugging, performance tuning, release hardening, and production support while ensuring solutions are secure, maintainable, and aligned with long-term business needs.

KEY ACCOUNTABILITIES

Project Leadership & Execution

Own delivery of remediation tasks, code changes, and security fixes across websites, applications, APIs, integrations, and cloud-hosted services

Troubleshoot issues, identify root causes, and implement fixes across code, configuration, dependencies, and platform controls

Support secure testing, validation, release, and deployment of fixes and enhancements across environments

Contribute to production support, incident resolution, and platform hardening activities

Participate in requirement analysis, issue clarification, and technical discussions with stakeholders and partner teams

Conduct code reviews and contribute to secure coding and implementation best practices

Support debugging, performance tuning, and maintainability improvements across components and platforms

Learning, Development & Mentoring

Proactively learn and apply secure development practices, tools, and technologies relevant to project needs

Contribute to knowledge sharing on secure coding, vulnerability remediation, and engineering best practices

Support team capability building through practical guidance on recurring risks, preventive controls, and effective implementation approaches

Continue to strengthen technical depth across web, integration, and cloud platforms

Technical Consulting & Strategy

Provide practical technical solutions for remediation and secure implementation tasks

Contribute to technical design discussions with focus on secure, scalable, and maintainable solutions

Apply knowledge of application security, platform architecture, APIs, integrations, and deployment practices to solve complex problems

Contribute to implementation standards, reusable patterns, and preventive improvements for future releases

MINIMUM QUALIFICATIONS

Education: Bachelor's degree in computers or related engineering field

Experience: 6-8 years as a software developer experience in high-stakes environment

Technical Skills:

Hands-on experience in software engineering, web application development, or security-focused development

Strong understanding of common web and application security vulnerabilities and mitigation approaches

Experience troubleshooting, fixing, testing, and deploying code or configuration changes across applications, APIs, integrations, or cloud-hosted services

Ability to debug issues across front-end, APIs, integrations, configuration, and platform components

Proactively drives issue resolution, demonstrates strong ownership, and manages multiple priorities effectively

Strong working knowledge of enterprise application architecture and technical toolsets to solve engineering problems

Soft Skills:

Demonstrates the ability to independently own and execute module-level remediation, development, and support tasks

Strong communication and collaboration skills across engineering, product, operations, and cyber security teams

PREFERRED QUALIFICATIONS

Experience with JavaScript or TypeScript ecosystems including Next.js and ReactJS

Experience with.NET applications, SQL-based systems, API security, and integration platforms such as MuleSoft

Familiarity with GCP services, cloud configuration review, secrets handling, logging or monitoring controls, CI/CD workflows, and deployment practices

Understanding of OWASP Top 10, secure SDLC practices, vulnerability management workflows, and remediation validation

Experience in code reviews, technical design discussions, production support, performance tuning, and CI/CD-based delivery

Experience working in cross-functional enterprise delivery teams

Relevant certifications such as Security+, CEH, or cloud security certifications are a plus

Knowledge of, familiarity with, or experience supporting CMS-driven digital ecosystems, especially Sitecore XM Cloud and legacy Sitecore environments

ELIGIBILITY

Applicants must meet minimum age qualifications in the country in which the job is located.