Security Engineer IV
Bangalore, KarnatakaOn-siteFull-time
AI Summary
Security Engineer 4 leads secure software development lifecycle, performs threat modeling and security testing, and guides security tooling and risk programs across the CI/CD pipeline.
About this role
About the Team
The security team at Meesho is like the Avengers to Meesho's S.H.I.E.L.D. After all, when 5% of Indian households shop with us, it’s important to build resilient systems to manage millions of orders every day. We’ve done this – with zero downtime! 😎 Sounds impossible? Well, that’s the kind of Engineering muscle that has helped Meesho become the e-commerce giant it is today. We value speed over perfection, and see failures as opportunities to become better. We’ve taken steps to inculcate a strong ‘Founder’s Mindset’ across our engineering teams, making us grow and move fast. We place special emphasis on the continuous growth of each team member - and we do this with regular 1-1s and open communication. As a Security Engineer, you will be part of self-starters who thrive on teamwork and constructive feedback. We know how to party as hard as we work! If we aren’t building unparalleled tech solutions, you can find us debating the plot points of our favorite books and games – or even gossiping over chai. So, if a day filled with building impactful solutions with a fun team sounds appealing to you, join us.
About the Role
As a Security Engineer 4, your role is integral in ensuring the security of our products throughout their development lifecycle. You will be involved from the very beginning, participating in threat modeling and design reviews to identify potential risks early. You'll also integrate and manage SAST tools within our CI/CD pipeline, ensuring continuous security testing as code evolves. Additionally, you'll lead and conduct vulnerability assessments and penetration testing (VAPT) to proactively uncover and address security vulnerabilities before they reach production.
What you will do
What you will need
Bonus Points
Skills
ArtifactoryAWSBug BountyCI/CDCloud SecurityContainerizationDevSecOpsDockerGCPGitJavaJenkinsNode.jsPythonReactSASTSecurity ArchitectSecurity Risk ModelingSource Code ReviewThreat ModelingVAPTWAFWeb Application Firewall
