Lead Security Engineer in Bangalore, भारत

Responsibilities

• Build Razorpay’s secure code review and threat modeling capabilities.
• Perform secure code reviews and threat modeling on key Razorpay assets.
• Train the Security Assessment team to conduct secure code reviews and threat modeling.
• Help build a scalable, self-service design review program for development teams.
• Extend static analysis tools and identify security vulnerabilities in large codebases.

Requirements

• 5–8 years of experience performing secure code reviews and design reviews.
• Experience working with and extending static analysis tools; Semgrep experience is a strong plus.
• Intermediate development or scripting skills, preferably in Go or Python.
• Ability to navigate large codebases and identify security vulnerabilities.
• Understanding of microservices and cloud architecture, web servers, and OWASP Top 10 vulnerabilities.
• Basic understanding of PHP, JavaScript, Go, and Python vulnerabilities.
• Good documentation, communication, teamwork, and teaching abilities.
• Engineering degree in computer science or a related field; a master’s degree is preferred.