Odist Magazine
Website:
razorpay.com
Job details:
Designation : Lead - Product Security
Roles & Responsibilities
1. Security Strategy & Leadership
- Define the vision, charter, and operating model for Razorpay’s security function across Product Security, Cloud Security, and Security Operations, including Incident Response.
- Establish security priorities, roadmaps, and measurable outcomes aligned with business objectives, engineering strategy, and risk appetite.
- Lead and develop a high-performing team of security engineers, fostering technical excellence, ownership, collaboration, and continuous learning.
- Drive proactive identification, assessment, and mitigation of security risks across products, infrastructure, and critical systems.
2. Product Security & Secure Engineering
- Lead product security initiatives to ensure security is embedded throughout the software development lifecycle, from design and development to deployment and production.
- Partner with engineering teams, tech leads, and architects to identify security vulnerabilities, review system designs, and implement effective security controls.
- Establish and scale security engineering practices, including threat modelling, secure code reviews, security testing, vulnerability management, and remediation processes.
- Champion secure-by-design principles and help engineering teams build resilient, scalable, and secure products.
3. Cloud Security & Security Operations
- Drive cloud security strategy and governance, ensuring robust security controls across cloud infrastructure, workloads, identities, and sensitive data.
- Oversee security operations, monitoring, threat detection, and incident response capabilities to strengthen organisational resilience.
- Establish effective incident management and response processes, ensuring timely investigation, containment, remediation, and post-incident learning.
- Continuously evaluate the effectiveness of security controls, operational processes, and risk mitigation strategies.
4. Engineering Collaboration & Security Evangelism
- Build strong partnerships with the CTO, VPs, Engineering Managers, Senior ICs, and other key stakeholders across the engineering organisation.
- Influence engineering strategy and architectural decisions by bringing security considerations into technical discussions early.
- Evangelise security best practices and enable engineering teams to take shared ownership of security outcomes.
- Translate complex security risks into clear, actionable recommendations for both technical and non-technical stakeholders.
- Drive adoption of security standards, tools, and engineering processes without compromising development velocity or product quality.
Mandatory Qualifications
- Bachelor’s degree in Computer Science, Engineering, or a related technical field. A master’s degree is a plus.
- 8+ years of experience in software development roles, such as Software Engineer, Tech Lead, Engineering Manager, or equivalent positions.
- Demonstrated experience managing Product Security teams and leading security engineering initiatives.
- Strong understanding of security principles, secure software development, application security, threat modelling, vulnerability management, and risk assessment.
- Proven track record of implementing effective engineering processes and driving their adoption across teams.
- Strong technical depth and the ability to partner with tech leads and architects to solve complex engineering and security problems.
- Excellent written and verbal communication skills, with the ability to explain security concepts and risks to non-security teams.
- Demonstrated ability to make concrete progress in ambiguous environments with incomplete information.
- Ability to manage high-pressure situations, make sound decisions, and engage effectively with senior stakeholders.
- Strong analytical thinking, problem-solving, collaboration, and interpersonal skills.
What Success Looks Like
- A clearly defined and effectively executed security strategy across product, cloud, and security operations.
- Security integrated into engineering workflows, architecture decisions, and the software development lifecycle.
- A high-performing security team with strong technical capabilities, clear ownership, and measurable impact.
- Improved security posture through proactive risk identification, timely vulnerability remediation, and effective incident response.
- Strong security ownership across engineering teams, with consistent adoption of secure engineering practices.
- Effective collaboration between security and engineering leadership, enabling secure product innovation at scale.
Click on Apply to know more.
