2 days ago
Bengaluru, IndiaStaff+
Responsibilities
- Build Razorpay’s secure code review and threat modeling capabilities.
- Perform secure code reviews and threat modeling on key Razorpay assets.
- Train the Security Assessment team to conduct secure code reviews and threat modeling.
- Help build a scalable, self-service design review program for development teams.
- Extend static analysis tools and identify security vulnerabilities in large codebases.
Requirements
- 5–8 years of experience performing secure code reviews and design reviews.
- Experience working with and extending static analysis tools; Semgrep experience is a strong plus.
- Intermediate development or scripting skills, preferably in Go or Python.
- Ability to navigate large codebases and identify security vulnerabilities.
- Understanding of microservices and cloud architecture, web servers, HTTP, and OWASP Top 10 vulnerabilities.
- Basic understanding of PHP, JavaScript, Go, and Python vulnerabilities.
- Good documentation, communication, teamwork, and teaching abilities.
- Engineering degree in computer science or a related field; a master’s degree is preferred.
Tech Stack
Categories
About Razorpay
Razorpay builds a full-stack payments and banking platform for businesses in India and Southeast Asia, offering payment gateway, payouts, subscriptions, payroll, neobanking (RazorpayX), and working capital (Razorpay Capital). Founded in 2014 and headquartered in Bangalore, it earns via transaction fees and financial services, and processes over $180 billion in annualized payment volume for customers across e-commerce, telecom, and consumer internet.