← Back to results

Lead Security Engineer

Lead the Secure Code Review and Threat Modeling initiatives at Razorpay to enhance product security.

Location
Bengaluru
Compensation
Not disclosed
Level
lead
Type
full time · On-site

Posted by employer 6 days ago

First seen on Joblaze 4 days ago

Last verified on the company career page 12 hours ago

Apply at Razorpay → Save job Scanned from razorpay.com

What you'll build

  • Build Secure Code Review and Threat Modeling capabilities
  • Perform Secure Code Review and Threat Modeling
  • Train Security Assessment team
  • Build scalable design review program

Must have

  • 5-8 years of experience performing Secure Code Review
  • Experience with Static Analysis tools
  • Good documentation and communication skills
  • Intermediate development/scripting skills in GoLang or Python
  • Ability to navigate large codebases

Nice to have

  • Semgrep experience
  • Understanding of Web Servers and HTTP
  • Basic understanding of PHP, Javascript vulnerabilities

Requirements

Experience
5–8 years
Education
Bachelor's degree

Not disclosed in this posting: compensation, visa sponsorship.

Joblaze summary

The Lead Security Engineer at Razorpay focuses on enhancing the company's secure code review and threat modeling capabilities, ensuring the integrity of key assets. This role requires expertise in secure code practices, familiarity with static analysis tools, and the ability to mentor team members in security assessments. Ideal candidates will have 5-8 years of experience in security engineering, with a solid understanding of microservices and cloud architecture. Razorpay fosters a culture of ownership and transparency, making it suitable for individuals who thrive in collaborative environments.

Joblaze insights

  • Listed 4 days ago — first seen on Joblaze October 29, 2026. Last confirmed on Razorpay's careers page November 2, 2026.

Quick facts

Is the Lead Security Engineer role remote?
No — this is an on-site role in Bengaluru.
How much experience is required?
5–8 years of relevant experience for this Lead Security Engineer role.
Where is the role based?
Razorpay is hiring for this position in Bengaluru.
What's the tech stack?
Joblaze extracted these technologies from the posting: Cloud, Go, Microservices, OWASP, Python, Static Analysis.
What seniority level is this role?
Razorpay targets lead candidates for this position.
Is this full-time or contract?
Full-time for this Lead Security Engineer role at Razorpay.

From the original posting

Razorpay is one of India’s leading full-stack financial technology companies, powering the way businesses move, manage, and grow money. Founded in 2014 by Harshil Mathur and Shashank Kumar with a simple vision - to simplify payments for Indian businesses - we’ve since grown into a fintech powerhouse driving India’s digital payment revolution.

Role : Product Security - Lead

High level summary of the role including an overview of the job’s main purpose, who the job holder will report to currently (Principal Engineer - Data Security) and how the job contributes to the organization’s success. Brief description of the team and the impact they make. Some information about the department the role sits within would be helpful.

Roles and Responsibilities:

  • Help build Razopay’s Secure Code Review and Threat Modeling capabilities
  • Perform Secure Code Review and Threat Modeling on key Razorpay assets
  • Train Security Assessment team on performing Security Code Review and Threat Modeling
  • Play key role in building scalable, self-serve design review program for dev teams

Mandatory Qualifications:

  • 5-8 years of experience performing Secure Code Review and Design Reviews
  • Experience working with and extending Static Analysis tools (Semgrep experience is a huge plus)
  • Good documentation and communication skills
  • Ability to work in a team environment and interact with people
  • Ability to teach other folks in the Security team to perform secure code reviews
  • Intermediate development/scripting skills. Preferably in GoLang or Python
  • Ability to navigate large codebases and find security vulnerabilities
  • Understanding of Microservices and Cloud architecture
  • Understanding of the following:
  • Understanding of Web Servers and HTTP
  • In-depth understanding of OWASP top 10 vulnerabilities
  • Basic understanding of PHP, Javascript, Golang, Python vulnerabilities
  • Engineering degree in computer science or related field. Masters degree is a plus

Location: Bangalore

Razorpay believes in and follows an equal employment opportunity policy that doesn't discriminate on gender, religion, sexual orientation, colour, nationality, age, etc. We welcome interests and applications from all groups and communities across the globe.
Follow us on LinkedIn & Twitter

Standard company text repeated across Razorpay's postings is omitted here.

Similar positions