Senior Software Engineer - Security

Title: Senior Software Engineer (Security)

Location: Mumbai, India

The Role:

At Morningstar, our mission is to help investors achieve their goals by delivering innovative and efficient solutions. We are seeking a Senior Software Engineer to join our International Wealth Platform, which builds scalable solutions to streamline financial advisor workflows and enhance the investor journey.

As a Senior Software Engineer, you will be aligned to our Security Initiative. This is a critical initiative we will be running. It will require someone with full stack experience as we review our end to end security capabilities and look to remediate and strengthen our capability. You will take ownership of key product modules, contribute to building scalable and high-performance applications, and ensure engineering excellence. You will collaborate with cross-functional teams to design, develop, and implement security features while adhering to industry best practices. This role offers an opportunity to work with modern technologies, including cloud-native services like Azure, .NET Core, and relational/non-relational databases, in an Agile environment.

Key Responsibilities:

• Analyze, troubleshoot, and remediate security issues in existing applications and products.
• Design, develop, and implement secure and scalable features, applying security by design principles.
• Conduct threat modeling, code reviews, and ensure adherence to secure coding standards.
• Implement and maintain security controls (authentication, authorization, encryption, secure APIs, logging).
• Enhance performance and scalability of systems through innovative solutions.
• Partner with Infrastructure and Cloud teams to address vulnerabilities and ensure compliance with internal and external standards
• Own key services within the architecture working with peers and Principle Software Engineers to ensure upgrades and enhancements are implemented.
• Ensure technical documentation is created and maintained
• Provide technical mentorship to junior team members and assist them in achieving their tasks.
• Actively participate in Agile ceremonies, including stand-ups, sprint planning, and retrospectives.
• Work closely with the PO / BA to refine user stories/tasks in Jira.

Requirements:

• Bachelor’s degree in computer science or a related field with 6+ years of professional experience in software development.
• At least 2+ years working on security-focused features or initiatives (e.g., authentication/authorization, data encryption, secure integrations).
• Expertise in creating APIs using .NET Framework or .NET Core and REST principles.
• Good to have experience in modern front-end frameworks like Vue, React, or Angular.
• Strong understanding of relational database (SQL) with hands on experience. Good to have experience with non-relational database like Raven / Cosmos etc.
• Experience in Test-Driven Development (TDD) and adherence to SOLID principles.
• Knowledge of CI/CD processes and integration into development workflows.
• Proven ability to define engineering best practices and mentor team members.
• Practical knowledge of modern web application architecture, including JavaScript-driven application flows and API-driven backends.
• Hands-on experience with Agile methodologies, particularly Scrum.
• Strong written and verbal communication skills, with the ability to build effective working relationships across teams.
• Self-driven, detail-oriented, and open to learning new technologies as needed.

Join us in our mission to empower investors by ensuring the highest quality in our products. Be part of a dynamic team driving excellence in designing and develop innovative.

Morningstar is an equal opportunity employer.

If you receive and accept an offer from us, we require that personal and any related investments be disclosed confidentiality to our Compliance team (days vary by region). These investments will be reviewed to ensure they meet Code of Ethics requirements. If any conflicts of interest are identified, then you will be required to liquidate those holdings immediately. In addition, dependent on your department and location of work certain employee accounts must be held with an approved broker (for example all, U.S. employee accounts). If this applies and your account(s) are not with an approved broker, you will be required to move your holdings to an approved broker.

Morningstar’s hybrid work environment gives you the opportunity to work remotely and collaborate in-person each week. While some positions are available as fully remote, we’ve found that we’re at our best when we’re purposely together on a regular basis, typically three days each week. A range of other benefits are also available to enhance flexibility as needs change. No matter where you are, you’ll have tools and resources to engage meaningfully with your global colleagues.