Senior Software Security Architect
Commvault, a leader in cyber resilience, is seeking a Senior Software Security Architect to join their team. This role involves leading the design and evaluation of secure software architectures across various systems and applications. The ideal candidate will possess deep expertise in security architecture review and threat modeling, with a strong understanding of modern software development practices and security best practices. Experience with automated tools for security architecture analysis and relevant security certifications is strongly preferred.
In this position, the Senior Software Security Architect will conduct in-depth security architecture reviews across cloud, on-premises, and hybrid environments. They will perform threat modeling to identify potential security risks and define mitigation strategies early in the development lifecycle. Collaboration with development teams, DevOps, and product owners is essential to design secure systems and guide secure software design decisions. The role also involves evaluating and implementing automated tools to support architecture reviews and continuous security assessments, creating and maintaining security architecture documentation and reusable patterns, and providing expert guidance on security controls, design patterns, and industry best practices. Additionally, the architect will contribute to the development and improvement of internal security standards, frameworks, and processes, while staying current on emerging threats, vulnerabilities, and regulatory requirements.
Candidates should have over five years of experience in application or software security architecture, with strong knowledge of threat modeling methodologies such as STRIDE, PASTA, and OCTAVE. Hands-on experience conducting security architecture reviews for complex systems is required, along with familiarity with automated security architecture tools like IriusRisk, ThreatModeler, or Microsoft Threat Modeling Tool. Experience in reviewing architecture for Generative AI solutions is also beneficial. A strong understanding of secure coding practices, the software development lifecycle (SDLC), and DevSecOps integration is essential. Excellent communication skills are necessary to collaborate with both technical and non-technical stakeholders. Preferred qualifications include relevant certifications such as CSSLP, CISSP, SABSA, TOGAF, or GICSP, experience in regulated environments (e.g., finance, healthcare, or critical infrastructure), familiarity with cloud platforms (AWS, Azure, GCP) and associated security architectures, and experience working in Agile or CI/CD environments.
While specific compensation details are not provided, Commvault offers a comprehensive benefits package that includes continuous professional development, product training, and career pathing. Employees are also entitled to annual health check-ups and tuition reimbursement. The company promotes an inclusive culture, providing opportunities to join various Community Guilds, and offers personal accident cover and term life cover.
Commvault is committed to fostering a culture of care and belonging, empowering employees to reach their highest potential. The company has been recognized for its inclusive environment, earning distinctions in categories such as Women, Inclusion, and Millennials. Employees have the flexibility to work in ways that best help them meet their personal and professional goals. Commvault's values guide its operations, emphasizing connection, inspiration, care, and delivering on promises.