General Mills

Position Title

Cyber Security Engineer I - Automation

Function/Group

Digital and Technology

Location

Mumbai

Shift Timing

Regular

Role Reports to

D&T Manager Cyber Security Engineering & Operations

Remote/Hybrid/in-Office

Hybrid

ABOUT GENERAL MILLS

We make food the world loves: 100 brands. In 100 countries. Across six continents. With iconic brands like Cheerios, Pillsbury, Betty Crocker, Nature Valley, and Häagen-Dazs, we’ve been serving up food the world loves for 155 years (and counting). Each of our brands has a unique story to tell.

How we make our food is as important as the food we make. Our values are baked into our legacy and continue to accelerate

us into the future as an innovative force for good. General Mills was founded in 1866 when Cadwallader Washburn boldly bought the largest flour mill west of the Mississippi. That pioneering spirit lives on today through our leadership team who upholds a vision of relentless innovation while being a force for good. For more details check out http://www.generalmills.com

General Mills India Center (GIC) is our global capability center in Mumbai that works as an extension of our global organization delivering business value, service excellence and growth, while standing for good for our planet and people.

With our team of 1800+ professionals, we deliver superior value across the areas of Supply chain (SC) , Digital & Technology (D&T) Innovation, Technology & Quality (ITQ), Consumer and Market Intelligence (CMI), Sales Strategy & Intelligence (SSI) , Global Shared Services (GSS) , Finance Shared Services (FSS) and Human Resources Shared Services (HRSS).For more details check out https://www.generalmills.co.in

We advocate for advancing equity and inclusion to create more equitable workplaces and a better tomorrow.

JOB OVERVIEW

Function Overview

The Digital and Technology team at General Mills stands as the largest and foremost unit, dedicated to exploring the latest trends and innovations in technology while leading the adoption of cutting-edge technologies across the organization. Collaborating closely with global business teams, the focus is on understanding business models and identifying opportunities to leverage technology for increased efficiency and disruption. The team's expertise spans a wide range of areas, including AI/ML, Data Science, IoT, NLP, Cloud, Infrastructure, RPA and Automation, Digital Transformation, Cyber Security, Blockchain, SAP S4 HANA and Enterprise Architecture. The MillsWorks initiative embodies an agile@scale delivery model, where business and technology teams operate cohesively in pods with a unified mission to deliver value for the company. Employees working on significant technology projects are recognized as Digital Transformation change agents. 

The team places a strong emphasis on service partnerships and employee engagement with a commitment to advancing equity and supporting communities. In fostering an inclusive culture, the team values individuals passionate about learning and growing with technology, exemplified by the "Work with Heart" philosophy, emphasizing results over facetime. Those intrigued by the prospect of contributing to the digital transformation journey of a Fortune 500 company are encouraged to explore more details about the function through the provided Link

Purpose of the role

The Digital and Technology team of General Mills India Centre is looking for a passionate and enthusiastic individual to contribute to the Global Digital Transformation initiative at General Mills in capacity of Cyber Security Engineer I – Automation. This role will report into D&T Manager Cyber Security Engineering & Operations in India and functionally collaborate with global Cyber Security. It is an Individual contributor role. 

The purpose of this role is to strengthen the organization's cybersecurity posture by designing, developing, and automating workflows, processes, and tools. The role involves partnering with cross-functional teams to build secure solutions that help respond and contain incidents at speed and implementing scalable and efficient cybersecurity solutions, ensuring operational resilience and repeatability. By building, maintaining and enhancing automation tools and web applications, the position aims to streamline processes, improve efficiency, and support proactive threat detection, incident response, and compliance management. This role requires a proactive, independent professional with strong technical, documentation, and collaborative skills, committed to continuous learning and innovation in cybersecurity and automation.

KEY ACCOUNTABILITIES

Automation and Web development

• Design and implement automated workflows to enhance cybersecurity operations, focusing on efficiency and scalability.
• Develop scripts and tools using Python and PowerShell to automate repetitive tasks and processes
• Develop and maintain web applications using Python frameworks such as Django and Flask.
• Build and maintain web applications and tools to support cybersecurity processes.
• Create and manage API endpoints using Flask-RESTX and FastAPI.
• Document all projects and automation scripts thoroughly.
• Utilize Git and GitHub for version control and collaboration.
• Implement CI/CD pipelines using GitHub Actions.
• Leverage containerization for code deployment on Kubernetes.
• General experience navigating and troubleshooting applications on Linux and Windows.
• Developing REST APIs for cross team automation and code reuse.
• Develop custom integrations for actions and ingestion in SOAR platform
• Use HTML, CSS, JavaScript, and Bootstrap 5 for front-end development.
• Communicate effectively with team members and stakeholders.
• Solve problems efficiently and effectively.
• Apply foundational knowledge of cybersecurity principles and tools.
• Utilize tools such as SIEM, SOAR, EDR, Firewalls, VPN, and OneTrust.
• Understand the incident response lifecycle and develop incident response playbooks.

On call support, continuous improvement & consultation

• Part of CSEO on call support and provide support for all security solutions, balancing customer service and business objectives with the need to maintain effective controls.
• Assist in the triage and resolution of ad-hoc incidents.
• Leverage incisive decision-making and critical-thinking skills.
• Periodic evaluation of operational duties including partnering with platform SMEs to ensure operating procedure relevance, efficiency and consistency
• Assist cross-functional technology teams in the effective use, deployment, and consumption of security technologies and controls

MINIMUM QUALIFICATIONS

• Must have full time Bachelor’s degree in computer science (preferred) or related field from an accredited university.
• Must have 3+ years of experience as a Python developer
• Proficiency in: Python, PowerShell, HTML, CSS, JavaScript, Git, GitHub, Docker, Kubernetes, REST PIs.
• Proven experience in providing project consultation on security requirements to other teams.
• Understanding and experience in cybersecurity incident response and security infrastructure monitoring.
• Foundational knowledge of cybersecurity principles and tools (SIEM, SOAR, EDR, Firewalls, VPN, OneTrust).
• Continuous learning mindset, willing to jump in and learn new tools and technology.
• Strong communication, problem-solving, risk-management, and continuous improvement mindset.
• Ability to work effectively with cross-functional teams and stakeholders. 
• Demonstrated self-motivation and ability to manage multiple priorities.

PREFERRED QUALIFICATIONS

• Master’s degree in computer science (preferred) or related field.
• Experience with Python frameworks such as Django and Flask, and API frameworks like Flask-RESTX and FastAPI.
• Experience with Python testing frameworks like pytest.
• Experience with CI/CD pipelines (e.g., GitHub Actions).
• Experience with containerization (Docker) and orchestration (Kubernetes).
• Experience building browser extensions (Manifest V2 and V3).
• Experience with Bootstrap 5.
• Familiarity with the incident response lifecycle and the development of incident response playbooks.
• Experience with GCP (Google Cloud Platform).