3 months ago
Bengaluru, IndiaSenior
Responsibilities
- Conduct security architecture reviews across cloud, on-premises, and hybrid environments
- Perform threat modeling and define mitigation strategies early in the development lifecycle
- Collaborate with development teams, DevOps, and product owners on secure system design
- Evaluate and implement automated tools for architecture reviews and continuous security assessments
- Create and maintain security architecture documentation and reusable patterns
- Provide guidance on security controls, design patterns, and industry best practices
- Improve internal security standards, frameworks, and processes
- Monitor emerging threats, vulnerabilities, and regulatory requirements
Requirements
- At least 5 years of experience in application or software security architecture
- Strong knowledge of STRIDE, PASTA, and OCTAVE threat modeling methodologies
- Hands-on experience conducting security architecture reviews for complex systems
- Familiarity with IriusRisk, ThreatModeler, Microsoft Threat Modeling Tool, or similar tools
- Experience reviewing GenAI solutions
- Strong understanding of secure coding practices, software development lifecycle, and DevSecOps integration
- Strong communication skills for collaboration with technical and non-technical stakeholders
- Preferred certifications include CSSLP, CISSP, SABSA, TOGAF, or GICSP
- Preferred experience includes regulated environments, cloud security architectures, and Agile or CI/CD environments
Benefits
- Continuous professional development, product training, and career pathing
- Annual health check-ups and tuition reimbursement
- Inclusive company culture and opportunities to join Community Guilds
- Personal accident cover and term life cover
Tech Stack
Categories
About Commvault
Commvault builds enterprise data protection and cyber resilience software that secures, backs up, and recovers workloads across on‑prem, cloud, and SaaS environments. It sells subscriptions and SaaS options, plus professional services, to organizations needing backup, disaster recovery, and ransomware recovery. Founded in 1996 and headquartered in Tinton Falls, NJ, Commvault is a public company traded on NASDAQ under the symbol CVLT.