Unlock Your Potential as a Security Engineer IV at Meesho
Join the dynamic team at Meesho, a pioneering e-commerce platform that's revolutionizing the way India shops online. As a Security Engineer IV, you'll play a critical role in safeguarding the company's products and services, ensuring the security and integrity of its vast e-commerce ecosystem. With a competitive salary and a remote work setup, this is an opportunity to redefine your career while making a significant impact.
About Meesho and the Security Team
Meesho is not just an e-commerce platform; it's a movement that empowers millions of small businesses and entrepreneurs to succeed online. With a strong focus on innovation, customer satisfaction, and social responsibility, Meesho has become a household name in India. The security team at Meesho is the backbone of its operations, working tirelessly to protect the company's systems and customers from potential threats. As a Security Engineer IV, you'll be part of this elite team, working alongside talented professionals who share a passion for security and excellence.
About the Role
As a Security Engineer IV, you'll be responsible for ensuring the security of Meesho's products throughout their development lifecycle. Your role will be integral in identifying potential risks, implementing security measures, and conducting vulnerability assessments to prevent security breaches. You'll work closely with the engineering teams to integrate security best practices into the development process, ensuring that security is not an afterthought but a fundamental aspect of the product development lifecycle.
Key Responsibilities
- Lead and manage all aspects of the Secure Software Development Lifecycle (SDLC), ensuring the security and integrity of Meesho's products.
- Implement and manage security tools within the CI/CD pipeline (DevSecOps), automating security testing and vulnerability assessment.
- Conduct and oversee Vulnerability Assessments and Penetration Testing (VAPT) for web applications, APIs, iOS, and Android apps, identifying potential security vulnerabilities and recommending remediation measures.
- Perform threat modeling, design, and architecture reviews to identify potential risks and recommend security best practices.
- Execute manual source code reviews and enhance security in production environments, ensuring the security and integrity of Meesho's systems.
- Manage and optimize a self-managed bug bounty program, encouraging responsible disclosure of security vulnerabilities and rewarding talented security researchers.
- Provide security architectural guidance to Engineering and IT teams, ensuring that security is integrated into the development process.
- Manage issues identified from penetration tests and bug bounty programs, recommending remediation measures and ensuring that security vulnerabilities are addressed.
- Lead security training and awareness campaigns across the organization, promoting a culture of security and awareness among Meesho's employees.
- Manage Web Application Firewalls (WAF) to ensure robust protection against potential security threats.
- Engage in the Security Champions program to integrate security practices within teams, promoting a culture of security and collaboration.
- Assist in creating and maintaining Security Risk Models for both new and existing systems, ensuring that security risks are identified and mitigated.
Essential Qualifications
To be successful as a Security Engineer IV at Meesho, you'll need:
- 7+ years of experience in product security, with a focus on application security and DevSecOps.
- Proven experience in leading architectural changes or cross-team efforts to mitigate security vulnerabilities.
- Proficiency in programming languages such as Java, React, Node.js, and Python.
- Hands-on experience with manual source code reviews and securing production code.
- Expertise in deploying and managing security tools in CI/CD pipelines.
- Experience with Git, Jenkins, Artifactory, or other similar technologies.
- Strong background in securing the software development lifecycle, including eliminating classes of vulnerabilities.
- Proficiency with cloud platforms like AWS or GCP, including their security tools.
Preferred Qualifications
To take your application to the next level, you'll need:
- Experience with Docker and containerization technologies.
- Additional experience in infrastructure security, particularly in GCP, Docker, and containerization.
- Relevant certifications such as GIAC Web Application Penetration Tester (GWAPT), OffSec's Advanced Web Attacks and Exploitation (WEB-300), etc.
- Strong understanding of SSO protocols, including OAuth and SAML.
- Experience speaking at meetups or conferences.
- Experience participating in bug bounty programs.
Skills and Competencies
To succeed as a Security Engineer IV at Meesho, you'll need:
- Strong technical skills in security and application development.
- Excellent communication and collaboration skills.
- Ability to lead and manage cross-functional teams.
- Strong problem-solving and analytical skills.
- Passion for security and a commitment to staying up-to-date with the latest security trends and best practices.
Career Growth Opportunities and Learning Benefits
At Meesho, we're committed to helping our employees grow and develop their skills. As a Security Engineer IV, you'll have opportunities to:
- Work on complex and challenging security projects.
- Develop your skills in security and application development.
- Collaborate with cross-functional teams to drive security initiatives.
- Participate in industry conferences and meetups to stay up-to-date with the latest security trends.
Work Environment and Company Culture
Meesho is a dynamic and fast-paced company that values innovation, collaboration, and customer satisfaction. Our culture is built around 11 guiding principles, or 'Mantras,' that influence everything from recognition and evaluation to growth discussions. We prioritize a people-centric culture, dedicated to hiring and developing exceptional talent.
Compensation, Perks, and Benefits
Meesho offers a comprehensive compensation package that includes:
- Market-leading salary and equity-based compensation.
- Employee-centric benefits, including medical insurance, wellness initiatives, and gym & recreational discounts.
- Generous leave policies, parental support benefits, and retirement benefits.
- Learning and development assistance to help you grow and develop your skills.
- Flexible benefits plans and salary advance support.
Join the Meesho Team
If you're a talented Security Engineer IV looking to make a significant impact, we want to hear from you. Apply now to join the Meesho team and take the first step towards a rewarding new role.
Seize this opportunity to redefine your career and make a lasting impact. Apply now and let's shape the future of e-commerce together!
Apply Now