Home
Communities
Companies
- Companies
  
  Discover best places to work
- Compare Companies
  
  Compare & find best workplace
- Add Office Photos
  
  Bring your workplace to life
- Add Company Benefits
  
  Highlight your company's perks
Reviews
- Company reviews
  
  Read reviews for 6L+ companies
- Write a review
  
  Rate your former or current company
Salaries
- Browse salaries
  
  Discover salaries for 6L+ companies
- Salary calculator
  
  Calculate your take home salary
- Are you paid fairly?
  
  Check your market value
- Share your salary
  
  Help other jobseekers
- Gratuity calculator
  
  Check your gratuity amount
- HRA calculator
  
  Check how much of your HRA is tax-free
- Salary hike calculator
  
  Check your salary hike
Interviews
- Company interviews
  
  Read interviews for 40K+ companies
- Campus placements
  
  Interviews questions for 2K+ colleges
- Share interview questions
  
  Contribute your interview questions
Jobs
Awards

WINNERS AWAITED!
- ABECA 2025
  
  WINNERS AWAITED!
  
  AmbitionBox Employee Choice Awards - 4th Edition
- ABECA 2024
  
  AmbitionBox Employee Choice Awards - 3rd Edition
- AmbitionBox Best Places to Work 2022
  
  2nd Edition
- AmbitionBox Best Places to Work 2021
  
  1st Edition

Add office photos

Engaged Employer

Meesho

Compare

3.7

based on 1.7k Reviews

Video summary

1 Meesho Security Engineer Job

Security Engineer IV

Meesho

3.7

based on 1.7k Reviews

7-12 years

Bangalore / Bengaluru

1 vacancy

Security Engineer IV

Meesho

posted 3mon ago

Job Role Insights

Flexible timing

Key skills for the job

Digital Marketing Python Penetration Testing Android Vulnerability Management Application Security

+ 4 more

Job Description

As a Security Engineer 4, your role is integral in ensuring the security of our products throughout their development lifecycle. You will be involved from the very beginning, participating in threat modeling and design reviews to identify potential risks early. you'll also integrate and manage SAST tools within our CI/CD pipeline, ensuring continuous security testing as code evolves. Additionally, you'll lead and conduct vulnerability assessments and penetration testing (VAPT) to proactively uncover and address security vulnerabilities before they reach production.

What you will do

Lead and manage all aspects of the Secure Software Development Lifecycle (SDLC).
Implement and manage security tools within the CI/CD pipeline (DevSecOps).
Conduct and oversee VAPT for web applications, APIs, iOS, and Android apps.
Perform threat modeling, design, and architecture reviews to identify potential risks.
Execute manual source code reviews and enhance security in production environments.
Manage and optimize a self-managed bug bounty program.
Provide security architectural guidance to Engineering and IT teams.
Manage issues identified from penetration tests and bug bounty programs.
Lead security training and awareness campaigns across the organization.
Manage Web Application Firewalls (WAF) to ensure robust protection.
Engage in the Security Champions program to integrate security practices within teams.
Assist in creating and maintaining Security Risk Models for both new and existing systems.

What you will need

7+ years of experience in product security, with a focus on application security and DevSecOps.
Proven experience in leading architectural changes or cross-team efforts to mitigate security vulnerabilities.
Proficiency in programming languages such as Java, React, Node.js, and Python.
Hands-on experience with manual source code reviews and securing production code.
Expertise in deploying and managing security tools in CI/CD pipelines.
Experience with Git, Jenkins, Artifactory, or other similar technologies
Strong background in securing the software development lifecycle, including eliminating classes of vulnerabilities.
Proficiency with cloud platforms like AWS or GCP, including their security tools.
Experience with Docker and containerization technologies is highly desirable.
Additional experience in infrastructure security, particularly in GCP, Docker, and containerization, is a bonus.

Bonus Points:
Relevant certifications such as GIAC Web Application Penetration Tester (GWAPT), OffSec s Advanced Web Attacks and Exploitation (WEB-300), etc
Strong understanding of SSO protocols, including OAuth and SAML.
Experience speaking at meetups or conferences.
Experience participating in bug bounty programs.