2 years ago
Bengaluru, IndiaStaff+
Responsibilities
- Lead and manage all aspects of the Secure Software Development Lifecycle.
- Implement and manage security tools within the CI/CD pipeline.
- Conduct and oversee VAPT for web applications, APIs, iOS, and Android apps.
- Perform threat modeling, design reviews, architecture reviews, manual source-code reviews, and production-code security improvements.
- Manage and optimize a self-managed bug bounty program and remediate findings from penetration tests and bounty programs.
- Provide security architecture guidance to Engineering and IT teams.
- Manage Web Application Firewalls and assist with Security Risk Models.
- Lead security training and awareness campaigns and participate in the Security Champions program.
Requirements
- 7+ years of product security experience focused on application security and DevSecOps.
- Experience leading architectural changes or cross-team efforts to mitigate security vulnerabilities.
- Proficiency in Java, React, Node.js, and Python.
- Hands-on experience with manual source-code reviews and securing production code.
- Expertise deploying and managing security tools in CI/CD pipelines.
- Experience with Git, Jenkins, Artifactory, or similar technologies.
- Experience securing the software development lifecycle and eliminating classes of vulnerabilities.
- Proficiency with AWS or GCP and their security tools.
- Experience with Docker and containerization technologies is highly desirable.
- Bonus qualifications include GWAPT or WEB-300 certifications, knowledge of OAuth and SAML, public speaking experience, and participation in bug bounty programs.
Benefits
- Competitive cash and equity-based compensation tailored to role, experience, and skills.
- Extensive medical insurance for employees and their families, including telehealth and wellness initiatives.
- Generous leave policies, parental support, retirement benefits, and learning and development assistance.
- Wellness, fitness, financial, and social support through the MeeCare program.
- Recognition programs, engaging workplace activities, salary advance support, relocation assistance, and flexible benefit plans.
- Inclusive and accessible workplace accommodations and alternate-format application support.
About Meesho
Meesho operates an India-focused e-commerce marketplace that connects consumers with small and medium sellers, providing catalog tools, integrated payments, and partner-led shipping. The platform offers zero-commission listings for merchants and supports deliveries through Valmo, an asset-light logistics network run via third-party partners. Founded in 2015 and headquartered in Bangalore, it is privately held.