Lead Security Engineer

The role

The Lead Security Engineer will help build secure code review and threat modeling capabilities. This person will perform security assessments on key assets and train the Security Assessment team.

What you will do

• Help build Razopay’s Secure Code Review and Threat Modeling capabilities
• Perform Secure Code Review and Threat Modeling on key Razorpay assets
• Train Security Assessment team on performing Security Code Review and Threat Modeling
• Play key role in building scalable, self-serve design review program for dev teams

Required qualifications

• 5-8 years of experience performing Secure Code Review and Design Reviews
• Experience working with and extending Static Analysis tools
• Good documentation and communication skills
• Ability to work in a team environment and interact with people
• Ability to teach other folks in the Security team to perform secure code reviews
• Intermediate development/scripting skills
• Ability to navigate large codebases and find security vulnerabilities
• Understanding of Microservices and Cloud architecture
• Understanding of Web Servers and HTTP
• In-depth understanding of OWASP top 10 vulnerabilities
• Basic understanding of PHP, Javascript, Golang, Python vulnerabilities
• Engineering degree in computer science or related field

Nice to have

• Semgrep experience is a huge plus
• Preferably in GoLang or Python
• Masters degree is a plus

About the company

Razorpay is a full-stack financial technology company that powers businesses to move, manage, and grow money. It is a fintech powerhouse with operations across India, Singapore and Malaysia.