Description
Job Overview
As a Security Engineer III in Infrastructure Security at Meesho, you will be a senior individual contributor owning Meesho's infrastructure security and security operations (SOC) end-to-end. You will set the technical direction for infrastructure security and work closely with other engineers, mentoring and uplifting them.
Responsibilities
- Cloud Security Architecture & Design Review: Own secure design for Meesho's GCP estate, including organisation policies, project structure, IAM, and service-account hygiene. Lead threat modeling and security reviews for new infrastructure and platform services.
- Kubernetes & Container Security: Harden GKE clusters and containerised workloads end-to-end, defining secure-by-default patterns for platform and product teams.
- Identity & Zero Trust: Drive Meesho's zero-trust roadmap for infrastructure, implementing least-privilege IAM, eliminating long-lived credentials, and enforcing just-in-time access patterns.
- Posture Management & Hardening: Own cloud security posture management using GCP-native tooling, continuously finding and remediating misconfigurations and attack paths.
- Infrastructure as Code & Pipeline Security: Embed security into infrastructure shipping, scanning and enforcing policies for Terraform, and hardening CI/CD pipelines.
- SOC & Detection and Response: Run Meesho's SOC, managing detection and response, ensuring high-quality alert triage, and driving post-incident fixes.
- Security Automation: Design and build automation to multiply the impact of the lean team, automating remediation, access reviews, and security workflows.
- Vulnerability & Patch Management: Own the vulnerability lifecycle for infrastructure, tracking exposure, and enforcing remediation SLAs.
- AI Infrastructure Security: Contribute to securing the infrastructure behind Meesho's AI workloads, including AI gateway planes and model-access controls.
- Mentorship & Security Partnership: Mentor junior security engineers, review their work, and act as the infrastructure security subject-matter expert for platform, SRE, and DevOps teams.
- Compliance Enablement: Translate control requirements from frameworks into pragmatic technical controls, providing evidence from owned systems.
Requirements
- 5-7 years of hands-on experience in infrastructure, cloud, or platform security.
- Strong hands-on cloud security experience, ideally on GCP.
- Deep, practical Kubernetes security expertise.
- Proven ability to lead threat modeling and translate findings into controls.
- Hands-on experience with infrastructure as code (Terraform) and CI/CD.
- Strong scripting or programming ability (Python or Go preferred).
- Experience running detection and response, operating a SIEM.
- Solid grounding in Linux, networking, and identity fundamentals.
Nice to Have
- Relevant certifications like CKS, Google Professional Cloud Security Engineer, OSCP, or GCPN.
- Experience with zero-trust architecture rollouts or large-scale IAM remediation programmes.
- Exposure to securing AI/LLM infrastructure and software supply-chain security.
- Offensive security exposure: cloud-focused red teaming, attack-path analysis, or published research/CVEs.