2 days ago
Bengaluru, IndiaSenior
Responsibilities
- Own infrastructure security and security operations across Meesho’s production cloud environment.
- Design and review GCP security architecture, including organization policies, IAM, VPC design, VPC Service Controls, workload identity, and encryption and key management.
- Harden GKE clusters and containerized workloads through secure configuration, RBAC, network policies, admission control, policy-as-code, image security, and runtime controls.
- Drive zero-trust architecture, least-privilege IAM, just-in-time access, secrets management, and production/non-production isolation.
- Operate cloud security posture management, identify and remediate misconfigurations and attack paths, and build preventive guardrails.
- Secure Terraform infrastructure and CI/CD pipelines, including scanning, policy enforcement, artifact integrity, dependency integrity, and software supply-chain controls.
- Own SIEM operations, the managed detection partner relationship, alert triage, escalation paths, telemetry onboarding, detections, on-call, and incident response.
- Build security automation for remediation, access reviews, inventory, attack-surface mapping, and self-service engineering workflows.
- Own infrastructure vulnerability and patch management, including OS and image patching, container base images, exposure tracking, and remediation SLAs.
- Help secure AI infrastructure, including AI gateway controls, model access, agent isolation, and egress controls.
- Mentor the SE2 and serve as the infrastructure security subject-matter expert for platform, SRE, and DevOps teams.
- Translate ISO 27001, SOC 2, DPDP Act, and CERT-In requirements into technical controls and evidence.
Requirements
- 5–7 years of hands-on experience in infrastructure, cloud, or platform security with end-to-end ownership of security outcomes in production cloud environments.
- A bachelor’s or master’s degree in Computer Science, Information Security, or a related field is preferred.
- Strong hands-on cloud security experience, preferably with GCP, including IAM, organization policy, VPC, VPC Service Controls, Cloud KMS, Security Command Center, and audit logging; deep AWS or Azure experience with willingness to learn GCP is also acceptable.
- Deep practical Kubernetes security expertise, preferably with GKE, including RBAC, network policies, admission control, workload identity, image and registry security, and runtime threat detection.
- Experience leading threat modeling for complex distributed infrastructure and translating findings into shipped controls.
- Hands-on Terraform experience and experience embedding security scanning and policy enforcement into CI/CD.
- Strong scripting or programming ability, preferably with Python or Go, and an automation-oriented approach.
- Experience operating detection and response functions, including SIEM operations, telemetry selection, high-signal detections, and leading infrastructure security incidents to closure.
- Solid Linux, networking, and identity fundamentals, including OAuth/OIDC, SAML, and service identity.
- Ability to prioritize risk at scale and drive initiatives across platform, SRE, and DevOps teams without direct authority.
- Strong communication skills and ability to explain infrastructure risk to engineers and leadership.
- Ability and willingness to mentor an earlier-career security engineer.
- Preferred certifications include CKS, Google Professional Cloud Security Engineer, OSCP, or GCPN.
- Bonus experience includes zero-trust rollouts, large-scale IAM remediation, SIEM/SOC integration, detection-as-code, AI/LLM infrastructure security, software supply-chain security, offensive security, DPDP Act and CERT-In requirements, and speaking at meetups or conferences.
Benefits
- Competitive cash and equity-based compensation tailored to role, experience, and skills.
- Extensive medical insurance for employees and their families, plus telehealth, wellness events, and fitness-related perks.
- Generous leave policies, parental support, retirement benefits, and learning and development assistance.
- Recognition programs, engaging workplace activities, salary advance support, relocation assistance, and flexible benefit plans.
- Inclusive and accessible workplace with reasonable accommodations and alternate-format application support.
Categories
About Meesho
Meesho operates an India-focused e-commerce marketplace that connects consumers with small and medium sellers, providing catalog tools, integrated payments, and partner-led shipping. The platform offers zero-commission listings for merchants and supports deliveries through Valmo, an asset-light logistics network run via third-party partners. Founded in 2015 and headquartered in Bangalore, it is privately held.