Real Jobs From Anywhere
Real Jobs From Anywhere
Back to Jobs

Security Engineer IV

meesho
Bangalore, Karnataka
•On-site•
Full-time
•
Posted almost 2 years ago
Tech
Apply Now

Job Description

About the Team
 
The security team at Meesho is like the Avengers to Meesho's S.H.I.E.L.D. After all, when 5% of Indian households shop with us, it’s important to build resilient systems to manage millions of orders every day. We’ve done this – with zero downtime! 😎 Sounds impossible? Well, that’s the kind of Engineering muscle that has helped Meesho become the e-commerce giant it is today. We value speed over perfection, and see failures as opportunities to become better. We’ve taken steps to inculcate a strong ‘Founder’s Mindset’ across our engineering teams, making us grow and move fast. We place special emphasis on the continuous growth of each team member - and we do this with regular 1-1s and open communication. As a Security Engineer, you will be part of self-starters who thrive on teamwork and constructive feedback. We know how to party as hard as we work! If we aren’t building unparalleled tech solutions, you can find us debating the plot points of our favorite books and games – or even gossiping over chai. So, if a day filled with building impactful solutions with a fun team sounds appealing to you, join us.
 
About the Role
 
As a Security Engineer 4, your role is integral in ensuring the security of our products throughout their development lifecycle. You will be involved from the very beginning, participating in threat modeling and design reviews to identify potential risks early. You'll also integrate and manage SAST tools within our CI/CD pipeline, ensuring continuous security testing as code evolves. Additionally, you'll lead and conduct vulnerability assessments and penetration testing (VAPT) to proactively uncover and address security vulnerabilities before they reach production.

Responsibilities

What you will do

  • Lead and manage all aspects of the Secure Software Development Lifecycle (SDLC).
  • Implement and manage security tools within the CI/CD pipeline (DevSecOps).
  • Conduct and oversee VAPT for web applications, APIs, iOS, and Android apps.
  • Perform threat modeling, design, and architecture reviews to identify potential risks.
  • Execute manual source code reviews and enhance security in production environments.
  • Manage and optimize a self-managed bug bounty program.
  • Provide security architectural guidance to Engineering and IT teams.
  • Manage issues identified from penetration tests and bug bounty programs.
  • Lead security training and awareness campaigns across the organization.
  • Manage Web Application Firewalls (WAF) to ensure robust protection.
  • Engage in the Security Champions program to integrate security practices within teams.
  • Assist in creating and maintaining Security Risk Models for both new and existing systems.

    • What you will need

  • 7+ years of experience in product security, with a focus on application security and Dev SecOps.
  • Proven experience in leading architectural changes or cross-team efforts to mitigate security vulnerabilities.
  • Proficiency in programming languages such as Java, React, Node.js, and Python.
  • Hands-on experience with manual source code reviews and securing production code.
  • Expertise in deploying and managing security tools in CI/CD pipelines.
  • Experience with Git, Jenkins, Artifactory, or other similar technologies.
  • Strong background in securing the software development lifecycle, including eliminating classes of vulnerabilities.
  • Proficiency with cloud platforms like AWS or GCP, including their security tools.
  • Experience with Docker and containerization technologies is highly desirable.
  • Additional experience in infrastructure security, particularly in GCP, Docker, and containerization, is a bonus.

    • Bonus Points

  • Relevant certifications such as GIAC Web Application Penetration Tester (GWAPT), OffSec’s Advanced Web Attacks and Exploitation (WEB-300), etc.
  • Strong understanding of SSO protocols, including OAuth and SAML.
  • Experience speaking at meetups or conferences.
  • Experience participating in bug bounty programs.

    • Ready to Apply?

    Take the next step in your career journey

    Apply Now

    Keep looking

    Related roles you might like

    Engineering Manager – AI Engineering

    meesho

    On-siteFull-time4 days ago

    Assistant Manager - Ops

    meesho

    On-siteFull-time7 days ago

    Senior Manager – Latent Last Mile

    meesho

    On-siteFull-time11 days ago

    Cluster Head ( Security & Investigation)

    meesho

    On-siteFull-time18 days ago

    Cluster Head ( Security & Investigation)

    meesho

    On-siteFull-time26 days ago

    Assistant Manager - Ethics Investigations

    meesho

    On-siteFull-time26 days ago

    Director- Business Finance

    meesho

    On-siteFull-timeabout 1 month ago

    GTM & Enterprise Sales Consultant – Meesho AI Services (MAS)

    meesho

    On-siteFull-timeabout 1 month ago

    Group Product Manager

    meesho

    On-siteFull-timeabout 1 month ago

    GTM Engineer – Meesho AI Services (MAS)

    meesho

    On-siteFull-timeabout 2 months ago

    Security Architect - AI-Powered Security Engineering

    meesho

    On-siteFull-timeabout 2 months ago

    Senior Manager - DAU Growth

    meesho

    On-siteFull-timeabout 2 months ago

    Software Development Engineer III DevOps

    meesho

    On-siteFull-timeabout 2 months ago

    Assistant Manager – HR

    meesho

    On-siteFull-time2 months ago

    Architect - Android

    meesho

    On-siteFull-time2 months ago

    Explore more

    Browse more jobs like this

    Category

    Tech jobs

    Work arrangement

    On-Site jobs

    Disclaimer: Real Jobs From Anywhere is an independent platform dedicated to providing information about job openings. We are not affiliated with, nor do we represent, any company, agency, or agent mentioned in the job listings. Please refer to our Terms of Services for further details.