On-site opportunity at
MeeshoSecurity Engineer III - Infra Security
Meesho is seeking a senior Security Engineer III to oversee infrastructure security and security operations from end to end in Bengaluru. Operating as a senior individual…
Career Tools
About This Role
Meesho is seeking a senior Security Engineer III to oversee infrastructure security and security operations from end to end in Bengaluru. Operating as a senior individual contributor within a lean team, the incumbent will define technical directions, establish guardrails, and serve as a trusted security advisor for platform and infrastructure architecture. The employer is an e-commerce platform that aims to democratize internet commerce for consumers and small businesses across India,…
Job Description
Meesho is seeking a senior Security Engineer III to oversee infrastructure security and security operations from end to end in Bengaluru. Operating as a senior individual contributor within a lean team, the incumbent will define technical directions, establish guardrails, and serve as a trusted security advisor for platform and infrastructure architecture. The employer is an e-commerce platform that aims to democratize internet commerce for consumers and small businesses across India, operating with advanced engineering infrastructure.
This role suits professionals comfortable moving across cloud architecture reviews, hands-on hardening, detection engineering, and incident response within the same week. The position requires strong collaboration with platform, SRE, and DevOps teams, along with mentoring junior engineers on the team.
Meesho maintains a people-centric culture supported by guiding principles known as Mantras, prioritizing continuous growth, regular check-ins, and an inclusive workplace. Employees have access to total rewards encompassing monetary and non-monetary elements, including the MeeCare holistic wellness program with medical insurance for staff and families, flexible benefit plans, learning and development assistance, and parental support.
Responsibilities
- Manage secure design for the GCP organization, covering IAM hygiene, VPC design, service accounts, and encryption key management
- Perform threat modeling and security reviews for new platform services alongside platform engineering
- Harden GKE clusters and containerized workloads through role-based access control, network policies, and runtime posture controls
- Drive the infrastructure zero-trust roadmap by eliminating static keys and implementing least-privilege access and secrets management
- Operate cloud security posture management tools to detect, prioritize, and remediate misconfigurations
- Integrate infrastructure-as-code scanning, pipeline hardening, and supply-chain controls into deployment workflows
- Direct the security operations center function, including SIEM management, managed detection partner relationships, alert triage, and incident response
- Design automation tooling for auto-remediation, access reviews, and self-service security workflows
- Oversee the vulnerability lifecycle for operating systems, container base images, and infrastructure patching
- Contribute to securing infrastructure for AI workloads, model gateways, and access controls
- Mentor team members, review work, and act as the subject matter expert for platform and DevOps teams
- Translate compliance frameworks such as ISO 27001, SOC 2, DPDP Act, and CERT-In into technical controls
Requirements
- 5 to 7 years of hands-on experience in cloud, platform, or infrastructure security within a production cloud environment
- Strong practical cloud security experience with GCP or deep AWS/Azure background with willingness to adapt
- Extensive Kubernetes security expertise including RBAC, network policies, admission control, and workload identity
- Experience leading threat modeling for complex distributed infrastructure
- Hands-on experience with Terraform for infrastructure as code and CI/CD security integration
- Strong programming or scripting abilities in Python or Go
- Practical background in running detection and response, operating a SIEM, and writing high-signal detections
- Solid fundamentals in Linux, networking, identity protocols, and risk prioritization at scale
Qualifications
- Bachelor's or Master's degree in Computer Science, Information Security, or a related field
- Certifications such as CKS, Google Professional Cloud Security Engineer, OSCP, or GCPN
- Prior experience with zero-trust architecture rollouts or large-scale IAM remediation
- Exposure to securing AI and LLM infrastructure or software supply-chain security
- Offensive security exposure such as cloud red teaming or published CVEs
Core Skills
Benefits
- Comprehensive monetary and non-monetary total rewards including cash and equity compensation
- MeeCare holistic wellness program covering physical, mental, financial, and social wellbeing
- Extensive medical insurance for employees and their families
- Generous leave policies, parental support, and retirement benefits
- Learning and development assistance
- Salary advance support, relocation assistance, and flexible benefit plans
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the location and work setting for this role?
The position is located in Bengaluru. The source posting does not specify whether the role is remote, hybrid, or on-site.
What is the employment type?
The employment type is full-time.
What salary is offered for this position?
The job posting does not state the salary, though it mentions competitive compensation comprising cash and equity-based pay tailored to the role, experience, and skills.
How many years of experience are required?
The role requires 5 to 7 years of hands-on experience in cloud, platform, or infrastructure security within a production cloud environment.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.