Senior Security Engineer
Posted 1
view
Summary
Senior Security Engineer at Razorpay (Bengaluru) building security tooling and embedding security into the DevOps pipeline — SAST, DAST, container scanning, and AWS cloud security checks — plus creating secure-by-default libraries and participating in design reviews to remediate defects.
Role & Responsibilities:
- Build and maintain security tools to automate defect discovery and managing open defects
- Build automated solutions to help incorporate Security in all stages of the DevOps pipeline (app and infra). This includes (but not limited to) SAST, DAST and Container scanning
- Build tools to help evaluate the security of our cloud (AWS) environment and provide remediation guidance
- Build secure pathways, which make it easier for developers to write secure code. This includes building security-first libraries, frameworks and blueprints
- Participate in security design reviews of critical applications and work with application teams to remediate security defects
- Coordinate with stakeholders across the organization
Experience Requirement:
- Engineering degree in computer science or related field. A Masters degree is a plus
- 5-7 years Experience in information security, Application development
- Experience with Application Security tools and techniques.
- Prior experience integrating Security practices into SDLC a must
- Application Threat modeling experience a plus
- Working knowledge of Go/Python/PHP is a strong plus
- Contribution to open-source software is a plus
- Excellent written and verbal communication skills
- Ability to make concrete progress in the face of ambiguity and imperfect knowledge