3 months ago
Bengaluru, IndiaSenior
Responsibilities
- Design, build, implement, and maintain scalable application security automation tools and pipelines.
- Integrate security automation into CI/CD workflows with developers, security engineers, and DevOps teams.
- Improve security tool coverage, efficiency, and performance.
- Develop custom scripts, plugins, and extensions for security testing and remediation automation.
- Monitor and analyze security automation results and generate actionable insights.
- Support incident response and remediation efforts.
- Track security automation trends and advocate for improvements to tooling and processes.
- Mentor engineers on secure coding and secure development lifecycle practices.
Requirements
- 6+ years of software engineering experience focused on security automation or application security.
- Proficiency in Python, Ruby, Go, Java, or similar programming languages.
- Strong understanding of application security principles, OWASP Top Ten vulnerabilities, and remediation techniques.
- Hands-on experience implementing and configuring SAST, DAST, and SCA security scanning tools.
- Familiarity with CI/CD pipelines and infrastructure as code tools is a plus.
- Understanding of software development lifecycle processes and security automation integration.
- Preferred experience with cloud-native security automation in AWS, Azure, or GCP environments.
- Preferred familiarity with container security, Docker, Kubernetes, and related security scanning solutions.
- Preferred knowledge of threat modeling and security risk assessments.
- Ability to solve problems, work independently, and collaborate with a team.
Tech Stack
AnsibleAWSAzureDockerGitHub ActionsGitLab CI/CDGoGoogle Cloud PlatformJavaJenkinsKubernetesPythonRubyTerraform
Categories
About Commvault
Commvault builds enterprise data protection and cyber resilience software that secures, backs up, and recovers workloads across on‑prem, cloud, and SaaS environments. It sells subscriptions and SaaS options, plus professional services, to organizations needing backup, disaster recovery, and ransomware recovery. Founded in 1996 and headquartered in Tinton Falls, NJ, Commvault is a public company traded on NASDAQ under the symbol CVLT.