Engineering Manager Security Operations

Razorpay was founded by Shashank Kumar and Harshil Mathur in 2014. Razorpay is building a new-age digital banking hub (Neobank) for businesses in India with the mission is to enable frictionless banking and payments experiences for businesses of all shapes and sizes. What started as a B2B payments company is processing billions of dollars of payments for lakhs of businesses across India. 

Key Responsibilities:

• Define and lead the charter for infrastructure security, endpoint security, and security operations (including incident detection and response).
• Build and lead a high-performing team of security engineers focused on defensive operations and platform resilience.
• Develop and maintain incident response plans, detection strategies, and escalation protocols.
• Partner with platform, SRE, and IT teams to implement secure configurations and controls across cloud and endpoint environments.
• Lead incident triage, forensic investigations, root cause analysis, and postmortem processes.
• Continuously improve visibility into the environment through security tooling, logging, and telemetry.
• Drive metrics-based reporting for operational excellence, incident trends, and risk posture.

Mandatory Qualifications:

• Bachelor's degree in Computer Science, Engineering, or a related field (Master’s preferred).
• 8+ years of experience in software engineering, infrastructure, or security-focused roles.
• Proven experience leading teams in infrastructure security, incident response, or security operations.
• Strong understanding of cloud security (preferably AWS), endpoint hardening, and threat detection technologies (SIEM, EDR, etc.).
• Demonstrated ability to execute in ambiguous environments with tight timelines.
• Exceptional communication skills, including the ability to explain technical risks to non-technical stakeholders.
• Strong collaboration and stakeholder management skills.

Good to Have:

• Exposure to product security and vulnerability management processes.
• Familiarity with regulatory frameworks (SOC 2, ISO 27001, PCI DSS).
• Experience in fintech or high-growth startup environments.
• Knowledge of modern DevSecOps tools and practices.