About the role
Role : Product Security - Lead
High level summary of the role including an overview of the job’s main purpose, who the job holder will report to currently (Principal Engineer - Data Security) and how the job contributes to the organization’s success. Brief description of the team and the impact they make. Some information about the department the role sits within would be helpful.
Roles and Responsibilities:
- Help build Razopay’s Secure Code Review and Threat Modeling capabilities
- Perform Secure Code Review and Threat Modeling on key Razorpay assets
- Train Security Assessment team on performing Security Code Review and Threat Modeling
- Play key role in building scalable, self-serve design review program for dev teams
Mandatory Qualifications:
- 5-8 years of experience performing Secure Code Review and Design Reviews
- Experience working with and extending Static Analysis tools (Semgrep experience is a huge plus)
- Good documentation and communication skills
- Ability to work in a team environment and interact with people
- Ability to teach other folks in the Security team to perform secure code reviews
- Intermediate development/scripting skills. Preferably in GoLang or Python
- Ability to navigate large codebases and find security vulnerabilities
- Understanding of Microservices and Cloud architecture
- Understanding of the following:
- Understanding of Web Servers and HTTP
- In-depth understanding of OWASP top 10 vulnerabilities
- Basic understanding of PHP, Javascript, Golang, Python vulnerabilities
- Engineering degree in computer science or related field. Masters degree is a plus
Location: Bangalore