Lead Security Engineer

Overview

Lead Security Engineer in Product Security at Razorpay, reporting to the Principal Engineer - Data Security. The role helps build Razorpay's Secure Code Review and Threat Modeling capabilities.

What you'll do

• Help build Razorpay's Secure Code Review and Threat Modeling capabilities.
• Perform Secure Code Review and Threat Modeling on key Razorpay assets.
• Train the Security Assessment team on performing Security Code Review and Threat Modeling.
• Play a key role in building a scalable, self-serve design review program for dev teams.

What you'll need

• 5-8 years of experience performing Secure Code Review and Design Reviews.
• Experience working with and extending Static Analysis tools.
• Good documentation and communication skills.
• Ability to work in a team environment and interact with people.
• Ability to teach other folks in the Security team to perform secure code reviews.
• Intermediate development/scripting skills, preferably in GoLang or Python.
• Ability to navigate large codebases and find security vulnerabilities.
• Understanding of Microservices and Cloud architecture.
• Understanding of Web Servers and HTTP.
• In-depth understanding of OWASP top 10 vulnerabilities.
• Basic understanding of PHP, Javascript, Golang, Python vulnerabilities.
• Engineering degree in computer science or related field.

Nice to have

• Semgrep experience is a huge plus.
• Masters degree is a plus.

Details

• Location: Bangalore.