Lead - Product Security
Razorpay · Posted Oct 12
Online payment gateway, business banking, payroll, and financial services platform
Bengaluru, Karnataka, IndiaFull-timeOnsiteLead/Staff8+ years₹60.0L–₹1.0Cr yearly27 applicants
FintechPaymentsPayment GatewayBusiness BankingFinancial ServicesPublic Company
Be an early applicantFull time
Get a personal compatibility score
Add a resume for personal matches
About the role
Razorpay's security function spans Product Security, Cloud Security, and Security Operations, including Incident Response, for its payments and financial technology products. The team partners with engineering leadership to embed secure-by-design principles across the software development lifecycle and cloud infrastructure. This Lead role defines the security strategy and operating model, leads a team of security engineers, and drives threat modelling, vulnerability management, and incident response practices across the engineering organisation.
What you will do
- Define the vision, charter, and operating model for Razorpay’s security function across Product Security, Cloud Security, and Security Operations, including Incident Response.
- Establish security priorities, roadmaps, and measurable outcomes aligned with business objectives, engineering strategy, and risk appetite.
- Lead and develop a high-performing team of security engineers, fostering technical excellence, ownership, collaboration, and continuous learning.
- Drive proactive identification, assessment, and mitigation of security risks across products, infrastructure, and critical systems.
- Lead product security initiatives to ensure security is embedded throughout the software development lifecycle, from design and development to deployment and production.
- Partner with engineering teams, tech leads, and architects to identify security vulnerabilities, review system designs, and implement effective security controls.
- Establish and scale security engineering practices, including threat modelling, secure code reviews, security testing, vulnerability management, and remediation processes.
- Champion secure-by-design principles and help engineering teams build resilient, scalable, and secure products.
- Drive cloud security strategy and governance, ensuring robust security controls across cloud infrastructure, workloads, identities, and sensitive data.
- Oversee security operations, monitoring, threat detection, and incident response capabilities to strengthen organisational resilience.
- Establish effective incident management and response processes, ensuring timely investigation, containment, remediation, and post-incident learning.
- Continuously evaluate the effectiveness of security controls, operational processes, and risk mitigation strategies.
- Build strong partnerships with the CTO, VPs, Engineering Managers, Senior ICs, and other key stakeholders across the engineering organisation.
- Influence engineering strategy and architectural decisions by bringing security considerations into technical discussions early.
- Evangelise security best practices and enable engineering teams to take shared ownership of security outcomes.
- Translate complex security risks into clear, actionable recommendations for both technical and non-technical stakeholders.
- Drive adoption of security standards, tools, and engineering processes without compromising development velocity or product quality.
- A clearly defined and effectively executed security strategy across product, cloud, and security operations.
- Security integrated into engineering workflows, architecture decisions, and the software development lifecycle.
- A high-performing security team with strong technical capabilities, clear ownership, and measurable impact.
- Improved security posture through proactive risk identification, timely vulnerability remediation, and effective incident response.
- Strong security ownership across engineering teams, with consistent adoption of secure engineering practices.
- Effective collaboration between security and engineering leadership, enabling secure product innovation at scale.
Skills used in this role
Application SecurityCloud SecurityThreat ModelingVulnerability ManagementSecure Code ReviewSecurity TestingIncident ResponseSecure Software DevelopmentRisk AssessmentSecurity OperationsCommunicationProblem SolvingCollaboration
What the employer is looking for
- Bachelor’s degree in Computer Science, Engineering, or a related technical field. A master’s degree is a plus.
- 8+ years of experience in software development roles , such as Software Engineer, Tech Lead, Engineering Manager, or equivalent positions.
- Demonstrated experience managing Product Security teams and leading security engineering initiatives.
- Strong understanding of security principles, secure software development, application security, threat modelling, vulnerability management, and risk assessment.
- Proven track record of implementing effective engineering processes and driving their adoption across teams.
- Strong technical depth and the ability to partner with tech leads and architects to solve complex engineering and security problems.
- Excellent written and verbal communication skills, with the ability to explain security concepts and risks to non-security teams.
- Demonstrated ability to make concrete progress in ambiguous environments with incomplete information.
- Ability to manage high-pressure situations, make sound decisions, and engage effectively with senior stakeholders.
- Strong analytical thinking, problem-solving, collaboration, and interpersonal skills.
Benefits and support
- Compensation and benefits are detailed in the job posting
About Razorpay
Razorpay is India's leading omnichannel payments and full-stack financial solutions company, providing an extensive suite of products to accept, process, and disburse digital payments. Beyond payment gateways, the company offers neo-banking solutions via RazorpayX, business loans, payroll management, and corporate credit cards. It serves millions of businesses ranging from startups and SMEs to large enterprises globally.
- Industry
- Fintech
- Company size
- 3000+ employees
- Founded
- 2013
- Location
- Bengaluru, India
- Funding stage
- Public Company
Funding
Public Company · $742M raised
Y CombinatorPeak XV PartnersTiger Global ManagementRibbit CapitalMatrix Partners IndiaGICLone Pine CapitalAlkeon CapitalTCV
- 2021-12-19Series F$375M
- 2021-04-19Series E$160M
- 2020-10-12Series D$100M
- 2018-07-05Series C$75M
- 2016-07-12Series B$20M
Leadership
HM
Harshil Mathur
CEO and Co-founder
SK
Shashank Kumar
MD and Co-founder
RK
Rahul Kothari
Chief Operating Officer
AC
Arpit Chugh
Chief Financial Officer
Recent coverage
Razorpay Blog
Razorpay Merchants Can Now Accept Apple Pay Online and In-Store, With No Card Entry or OTPs2025-09-30
Razorpay Blog
At Global Fintech Fest, Razorpay Presents AI Payments Model, Vulcan to PM Narendra Modi2025-09-10
PL Capital
Razorpay Posts 65% Revenue Jump in FY25 as IPO Preparations Advance2026-04-20
The Paypers
Razorpay plans confidential IPO filing in India targeting USD 600 mln raise2026-04-20