Meesho - Security Engineer III - Infrastructure/Cloud Security (5-7 yrs)

About the Team :

The security team at Meesho is like the Avengers to Meesho's S.H.I.E.L.D. After all, when 5% of Indian households shop with us, its important to build resilient systems to manage millions of orders every day. Weve done this with zero downtime! Sounds impossible? Well, thats the kind of Engineering muscle that has helped Meesho become the e-commerce giant it is today. We value speed over perfection, and see failures as opportunities to become better. Weve taken steps to inculcate a strong Founders Mindset across our engineering teams, making us grow and move fast. We place special emphasis on the continuous growth of each team member - and we do this with regular 1-1s and open communication. As a Security Engineer III, you will be part of self-starters who thrive on teamwork and constructive feedback. We know how to party as hard as we work! If we arent building unparalleled tech solutions, you can find us debating the plot points of our favorite books and games or even gossiping over chai. So, if a day filled with building impactful solutions with a fun team sounds appealing to you, join us.

About the Role :

As our Security Engineer III, your primary focus will be on enhancing the security of Meeshos products and services, with particular attention to vulnerability assessment, patch management, purple teaming, incident detection and response in cloud environments. Leveraging your expertise in infrastructure security, you will conduct thorough security assessments across cloud environments and assist in mitigating the identified misconfigurations or vulnerabilities in our systems. Clear communication of complex security threats and solutions to stakeholders will be essential in driving security improvements. Your dedication to excellence will ensure the robust protection of Meesho's assets and the successful delivery of projects with heightened security measures.

What you will do :

- Conduct security assessments and assist in mitigating the identified misconfigurations or vulnerabilities in the systems.

- Own and manage security tools like CNAPP, SIEM.

- Reduce false-positives, correctly prioritize the flagged issues and mitigate them.

- Review access controls across cloud environments, mitigate security risks and follow the principle of least privilege.

- Ensure cloud environments comply with ISO-27001:2022, CIS benchmarks and industry standards.

- Perform attack simulation, log analysis, incident detection and response, and create custom detection rules.

- Enhance security aspects of CI/CD pipeline, WAF, OS, container technologies.

- Take new initiatives to enhance the infrastructure security posture of Meesho.

What you will need :

- Bachelors or Masters degree in Computer Science, Information Security, or related field.

- Minimum 5-7 years of experience in cybersecurity roles, with a focus on infrastructure/cloud security.

- Experience with GCP (preferred) or other CSPs.

- Experience with Docker, Kubernetes and OS security hardening aspects.

- Experience with 0-day vulnerability response and deploying security patches.

- Experience with WAF (Akamai, Cloudflare).Experience with managing security tools like CNAPP, SIEM.

- Hands-on experience planning and executing red team exercises, including attack simulation, reconnaissance and post-exploitation activities.

- Understanding of ISO-27001:2022, CIS benchmarks.

- Experience with performing IAM/access control review and following the principle of least privilege.

- Familiarity with CI/CD tools, security automation processes, and tools integration.

- Strong scripting skills to automate security tasks.

- Experience with Terraform, Jenkins, ArgoCD.

- CTFs, Bug Bounties, CVEs will be a big plus.

- Strong analytical and problem-solving abilities.

- Exceptional communication skills for effective cross-functional collaboration.

About us :

Welcome to Meesho, where every story begins with a spark of inspiration and a dash of entrepreneurial spirit. We're not just a platform; we're your partner in turning dreams into realities.

Our Mission :

Democratising internet commerce for everyone- Meesho (Meri shop) started with a single idea in mind -to be an e-commerce destination for the next billion Indian consumers and enable 100 million small businesses to succeed online. We provide sellers with a range of industry-first benefits such as zero commission and the lowest shipping cost. Over 1.75 million sellers are registered on Meesho, growing their business by tapping the companys massive customer base, state-of-the-art tech infrastructure, pan-India logistics at the lowest cost through third-party logistics providers in an 'Everyday Lowest Cost' channel for sellers. Affordable, relatable merchandise mirroring local markets has helped us make inroads with first-time internet users in the country. We cater to an underserved and unique customer base and cover every serviceable pincode in the country. Our unique business model and continuous innovation has enabled us to become the first Indian horizontal E-commerce company.

Culture and Total Rewards :

Our focus is on cultivating a dynamic workplace characterized by high impact and performance excellence. We prioritize a people-centric culture, dedicated to hiring and developing exceptional talent. Total rewards at Meesho comprises of a comprehensive set of elements - monetary, non monetary, tangible and intangible in nature. Our 11 guiding principles, or "Mantras," are the backbone of how we operate - influencing everything from recognition and evaluation to growth discussions. Daily rituals & processes like Reflections, Listen or Die , Internal Mobility Program, Talent Reviews, Continuous Performance Management - all embody these principles.

We provide market leading compensation - both cash and equity-based - specific to job roles, individual experience and skill along with our employee centric benefits and work environment. We focus extensively on holistic wellness - through our MeeCare Program - encompassing benefits and policies across physical, mental, financial, and social wellness aspects. This includes extensive medical insurance benefits for employees and their families, wellness initiatives like telehealth, wellness events, and gym & recreational discounts etc. To support work-life balance, we provide generous leave policies, parental support benefits, retirement benefits, and learning and development assistance. Through gratitude for stretched work, personalized gifts, engagement & fun at work - we promote employee delight at the workplace. Many other benefits such as salary advance support, relocation assistance, and flexible benefits plans further enrich the Meesho employee experience.

Know more about Meesho here : https://www.meesho.io/

Note : For your candidature to be considered on this job, you need to apply necessarily on the redirected career page of the company as well.