Lead Security Engineer

Skills this role screens for

About the role

Razorpay is one of India’s leading full-stack financial technology companies, powering the way businesses move, manage, and grow money. Founded in 2014 by Harshil Mathur and Shashank Kumar with a simple vision - to simplify payments for Indian businesses - we’ve since grown into a fintech powerhouse driving India’s digital payment revolution.

Razorpay powers millions of businesses with a smarter, scalable stack that goes beyond transactions to help them truly build and grow.

From building AI-native agentic payments, to AI-assisted fraud detection and real-time risk intelligence to automated reconciliation, smart payouts, and predictive financial insights, we are embedding intelligence across our stack to make money movement faster, safer, and more efficient. In close collaboration with ecosystem partners - including banks, networks, regulators - we are pioneering industry-first solutions that are shaping the next era of fintech

Across India, Singapore and Malaysia, our products span everything from seamless checkouts to payroll automation - powering a fintech ecosystem that’s redefining how money moves across Asia.

Today, that ecosystem supports everyone from early-stage startups to some of India’s largest enterprises, enabling them to accept, process, and disburse payments at scale while expanding into new ways of managing money more efficiently.

Our scale speaks volumes: Razorpay processes $180+ billion in annualized transactions, powering leading businesses like Airbnb, Facebook, WhatsApp, Airtel, CRED, BookmyShow, Zomato, Swiggy, Lenskart, Mirae Asset Capital markets, Indian Oil, National Pension Scheme - and over 100 of India’s unicorns. With strong roots in India and growing operations in Southeast Asia, we are shaping the next chapter of financial technology across the region.

We are backed by global investors including GIC, Peak XV Partners (formerly Sequoia Capital India & SEA), Tiger Global, Ribbit Capital, Matrix Partners, MasterCard, and Salesforce Ventures, having raised over $740 million to date. Strategic acquisitions - including Ezetap (POS and offline payments), Curlec (Malaysia expansion), BillMe (digital invoicing), and POP (rewards-first UPI) - along with earlier moves in fraud prevention, payroll, and lending, have further strengthened our platform and widened our footprint across Asia.

But what truly sets Razorpay apart is our culture. At Razorpay, ownership is our oxygen - you own what you build, with no micromanagement or red tape, just the runway to make your ideas fly. Learning is a lifestyle - if you’re curious, you’ll feel at home here. People > Pedigree - we hire for attitude, hustle, and hunger more than degrees. Transparency thrives over titles - this is where interns question CXOs and CXOs say “thank you.” Guided by our values of Customer First, Autonomy & Ownership, Agility with Integrity, Transparency, Challenging the status quo and a strong belief that Razorpay grows with Razors, you’ll be part of a 3000+ strong team building not just products, but the financial infrastructure of the future.

Role : Product Security - Lead

High level summary of the role including an overview of the job’s main purpose, who the job holder will report to currently (Principal Engineer - Data Security) and how the job contributes to the organization’s success. Brief description of the team and the impact they make. Some information about the department the role sits within would be helpful.

The work

Roles and Responsibilities

• Help build Razopay’s Secure Code Review and Threat Modeling capabilities
• Perform Secure Code Review and Threat Modeling on key Razorpay assets
• Train Security Assessment team on performing Security Code Review and Threat Modeling
• Play key role in building scalable, self-serve design review program for dev teams

Who they want

Mandatory Qualifications

Location: Bangalore

Razorpay believes in and follows an equal employment opportunity policy that doesn't discriminate on gender, religion, sexual orientation, colour, nationality, age, etc. We welcome interests and applications from all groups and communities across the globe.

Follow us on LinkedIn & Twitter

• 5-8 years of experience performing Secure Code Review and Design Reviews
• Experience working with and extending Static Analysis tools (Semgrep experience is a huge plus)
• Good documentation and communication skills
• Ability to work in a team environment and interact with people
• Ability to teach other folks in the Security team to perform secure code reviews
• Intermediate development/scripting skills. Preferably in GoLang or Python
• Ability to navigate large codebases and find security vulnerabilities
• Understanding of Microservices and Cloud architecture
• Understanding of the following:
• Understanding of Web Servers and HTTP
• In-depth understanding of OWASP top 10 vulnerabilities
• Basic understanding of PHP, Javascript, Golang, Python vulnerabilities
• Engineering degree in computer science or related field. Masters degree is a plus