Security Engineer III - Infra Security

About the Team
 
The security team at Meesho is like the Avengers to Meesho's S.H.I.E.L.D. After all, when 5% of Indian households shop with us, it’s important to build resilient systems to manage millions of orders every day. We’ve done this – with zero downtime! 😎 Sounds impossible? Well, that’s the kind of Engineering muscle that has helped Meesho become the e-commerce giant it is today. We value speed over perfection, and see failures as opportunities to become better. We’ve taken steps to inculcate a strong ‘Founder’s Mindset’ across our engineering teams, making us grow and move fast. We place special emphasis on the continuous growth of each team member - and we do this with regular 1-1s and open communication. As a Security Engineer, you will be part of self-starters who thrive on teamwork and constructive feedback. We know how to party as hard as we work! If we aren’t building unparalleled tech solutions, you can find us debating the plot points of our favorite books and games – or even gossiping over chai. So, if a day filled with building impactful solutions with a fun team sounds appealing to you, join us.
 
About the Role
 
As a Security Engineer 3 in Infrastructure Security, you are a senior individual contributor who owns Meesho's infrastructure security and security operations (SOC) end to end. You will be one of the engineers securing everything from GCP organisation policy and IAM down to Kubernetes workloads and CI/CD infrastructure, so you will set the technical direction for infrastructure security, not just execute it. You operate with limited supervision, act as the trusted security voice in infrastructure and platform architecture discussions, and partner closely with other engineers whom you will mentor and uplevel. 
The role rewards breadth with depth: you should be comfortable moving between cloud architecture reviews, hands-on hardening, detection engineering, and incident response in the same week, and you will have unusual freedom to automate, consolidate, and build the guardrails that let a lean team secure a platform operating at Meesho's scale.

What you will do: Cloud Security Architecture & Design Review: Own secure design for Meesho's GCP estate, including organisation policies, project structure, IAM and service-account hygiene, VPC design, VPC Service Controls, workload identity, and encryption/key management (Cloud KMS). Lead threat modeling and security reviews for new infrastructure and platform services, and drive the resulting requirements into production with platform engineering. Kubernetes & Container Security: Harden GKE clusters and containerised workloads end to end: cluster configuration, RBAC, network policies, admission control and policy-as-code, workload identity, image provenance and registry controls, and runtime posture. Define the secure-by-default patterns that platform and product teams build on. Identity & Zero Trust: Drive Meesho's zero-trust roadmap for infrastructure: least-privilege IAM at scale, elimination of long-lived credentials and static keys, just-in-time and break-glass access patterns, secrets management, and strong isolation between production and non-production environments. Posture Management & Hardening: Own cloud security posture management using GCP-native tooling (Security Command Center) and complementary controls. Continuously find, prioritise, and burn down misconfigurations and attack paths across the estate, and convert recurring findings into preventive guardrails rather than tickets. Infrastructure as Code & Pipeline Security: Embed security into how infrastructure ships: IaC scanning and policy enforcement (Terraform), CI/CD pipeline hardening, artifact and dependency integrity, and software supply-chain controls for infrastructure components. SOC & Detection and Response (End-to-End Ownership): Own Meesho's SOC and detection & response function: run the SIEM and the managed detection (MxDR) partner relationship, own alert triage quali