← All roles

Security Engineer IV

Meesho· Tech – Infrastructure
Apply on company site
BangaloreFull Time EmployeePosted 11mo ago

About the role

Senior security engineer focused on secure software development lifecycle, threat modeling, CI/CD security, and proactive vulnerability management across Meesho’s products.

Responsibilities

  • Lead and manage all aspects of the Secure Software Development Lifecycle (SDLC).
  • Implement and manage security tools within the CI/CD pipeline (DevSecOps).
  • Conduct and oversee VAPT for web applications, APIs, iOS, and Android apps.
  • Perform threat modeling, design, and architecture reviews to identify potential risks.
  • Execute manual source code reviews and enhance security in production environments.
  • Manage and optimize a self-managed bug bounty program.
  • Provide security architectural guidance to Engineering and IT teams.
  • Manage issues identified from penetration tests and bug bounty programs.
  • Lead security training and awareness campaigns across the organization.
  • Manage Web Application Firewalls (WAF) to ensure robust protection.
  • Engage in the Security Champions program to integrate security practices within teams.
  • Assist in creating and maintaining Security Risk Models for both new and existing systems.

Qualifications

  • 7+ years of experience in product security, with a focus on application security and Dev SecOps.
  • Proven experience in leading architectural changes or cross-team efforts to mitigate security vulnerabilities.
  • Proficiency in programming languages such as Java, React, Node.js, and Python.
  • Hands-on experience with manual source code reviews and securing production code.
  • Expertise in deploying and managing security tools in CI/CD pipelines.
  • Experience with Git, Jenkins, Artifactory, or other similar technologies.
  • Strong background in securing the software development lifecycle, including eliminating classes of vulnerabilities.
  • Proficiency with cloud platforms like AWS or GCP, including their security tools.
  • Experience with Docker and containerization technologies is highly desirable.
  • Additional experience in infrastructure security, particularly in GCP, Docker, and containerization, is a bonus.

Skills

Required:Secure SDLCThreat modelingVAPTCI/CD securityCloud securityProgramming
Nice to have:WAF management

Benefits

  • Competitive compensation tailored to role and experience.
  • Employee-centric benefits and a holistic wellness program (MeeCare) including extensive medical insurance for employees and families, telehealth, wellness events, and fitness perks.
  • Leave policies supporting work-life balance, parental support, retirement benefits, and learning and development assistance.
  • Salary advance support, relocation assistance, and flexible benefit plans.
  • Inclusive and accessible workplace with accommodations and support for differently abled employees.
Last updated Oct 21, 2026. Interested? Apply on the company site.
Meesho logo

About Meesho

Building for a billion Indians

Meesho careers, Meesho blogs and other fascinating details about India’s hottest e-commerce app are available here. Come join us.

e-commercesocial commerceIndia
Company profileWebsite

More open roles at Meesho