← All roles

Security Engineer III

Meesho· Tech – Infrastructure
Apply on company site
Bangalore, KarnatakaFull Time EmployeePosted 2w ago

About the role

Senior security engineer focused on end-to-end security outcomes across one or more product areas, driving secure design, threat modeling, offensive/defensive security, DevSecOps, cloud security, AI/LLM security, and mentoring for Meesho’s scale.

Responsibilities

  • Security Architecture & Threat Modeling: Lead threat modeling and secure design reviews for complex, multi-service features, and partner with engineering to drive the resulting security requirements into production. Contribute security expertise to architecture discussions and help shape secure-by-default patterns that other teams adopt.
  • Application & Offensive Security: Own and conduct advanced security assessments (VAPT) across web platforms, APIs, and mobile applications (iOS & Android), including business-logic, authentication, authorization, and multi-tenancy issues; plan and run red team and purple team exercises and translate findings into durable architectural fixes.
  • Manual Code Review: Perform in-depth manual and automated source code reviews to identify security-critical bugs, and work with developers to eliminate whole classes of vulnerabilities at the framework or platform level.
  • DevSecOps & Automation: Own the integration, tuning, and scaling of security tooling (SAST, DAST, SCA, secret scanning, container scanning) in CI/CD; design and build custom security tooling and automation; contribute to supply-chain and pipeline-hardening initiatives.
  • Cloud Security: Drive security reviews and hardening of cloud-native workloads (AWS, Kubernetes/EKS, containers); covering identity and access, tenant isolation, network controls, and secrets management.
  • AI/LLM Security: Contribute to securing Meesho's AI-powered features, including threat modeling of LLM/RAG, prompt-injection and data-leakage controls, tenant isolation, and secure SDLC patterns.
  • Vulnerability & Bug Bounty Management: Own vulnerability lifecycle and remediation tracking; help run the self-managed bug bounty program including triage, researcher engagement, and driving fixes to closure.
  • Security Metrics: Define and track security metrics (coverage, remediation SLAs, mean time to remediate) to drive engineering behavior and prioritization.
  • Security Partnership & Mentorship: Act as security SME for developers; provide secure-coding guidance, code reviews, consultations; mentor SE1/SE2 engineers and raise the team's technical depth.
  • Security Culture & Compliance: Drive security culture initiatives and contribute to risk and compliance efforts (ISO 27001 readiness, TPRM, BCP/BIA).

Qualifications

  • 5-7 years of hands-on experience in product security or application security with end-to-end ownership of security workstreams.
  • Bachelor’s or Master’s degree in Computer Science, Information Security, or related field (preferred).
  • Lead threat modeling sessions and drive findings into the SDLC across cross-functional teams.
  • Strong proficiency in security assessments of web apps and APIs; deep knowledge of OWASP Top 10 (Web/API) and complex auth/session vulnerabilities.
  • Hands-on manual code review experience; able to read Java, Node.js, Python, and React.
  • Experience with DevSecOps, CI/CD security tooling, and building custom security automation.
  • Cloud security experience on AWS or GCP; knowledge of Docker and Kubernetes security.
  • Offensive security experience planning/executing red/purple team exercises.
  • Mobile security knowledge for Android/iOS; familiarity with OWASP MASVS and mobile vulnerabilities; experience with Frida, Objection, Drozer, MobSF.
  • Strong analytical and problem-solving skills; ability to communicate security issues to technical and non-technical audiences; ability to mentor engineers.

Skills

Required:Threat modelingSecurity assessments (web/API/mobile)Code review (Java, Node.js, Python, React)DevSecOps toolingCloud security (AWS/GCP)Offensive security (red/purple team)
Nice to have:Mobile security (Android/iOS)

Benefits

  • Competitive compensation with cash and equity components (as described in Total Rewards).
  • MeeCare holistic wellness program covering physical, mental, financial, and social wellness.
  • Extensive medical insurance for employees and families.
  • Parental support, retirement benefits, and learning and development assistance.
  • Generous leave policies and work-life balance support.
  • Relocation assistance and flexible benefit plans.
  • Salary advance support and other employee-centric benefits.
Last updated Oct 21, 2026. Interested? Apply on the company site.
Meesho logo

About Meesho

Building for a billion Indians

Meesho careers, Meesho blogs and other fascinating details about India’s hottest e-commerce app are available here. Come join us.

e-commercesocial commerceIndia
Company profileWebsite

More open roles at Meesho