Senior Security Operations Engineer

Responsibilities

• Design, build, and maintain scalable automation tools and pipelines for application security, including SAST, DAST, and SCA scanning.
• Collaborate with developers, security engineers, and DevOps teams to integrate security automation into CI/CD workflows.
• Develop custom scripts, plugins, or APIs to extend the capabilities of security testing and remediation automation.
• Identify opportunities to improve security tool coverage, efficiency, and performance.
• Monitor and analyze security automation tool results to generate actionable insights and support incident response.
• Provide mentorship and guidance to other engineers on secure coding and secure development lifecycle (SDLC) practices.

Requirements

• 6+ years of software engineering experience with a focus on security automation or application security.
• Proficiency in Python, Ruby, Go, Java, or similar programming languages.
• Strong understanding of application security principles and vulnerabilities, such as the OWASP Top Ten.
• Hands-on experience configuring security scanning tools (e.g., Checkmarx, Fortify, Burp Suite, OWASP ZAP, Snyk, or WhiteSource).
• Solid understanding of the software development lifecycle (SDLC) and how to integrate security automation seamlessly.
• Excellent problem-solving skills and the ability to work both independently and collaboratively.

Preferred Qualifications

• Experience with cloud-native security automation in AWS, Azure, or GCP environments.
• Familiarity with container security (e.g., Docker, Kubernetes) and related scanning solutions.
• Familiarity with CI/CD pipelines (e.g., Jenkins, GitHub Actions, GitLab CI) and Infrastructure as Code tools (e.g., Terraform, Ansible).
• Knowledge of threat modeling and security risk assessments.

About the Company

Commvault (NASDAQ: CVLT) is the gold standard in cyber resilience. The company empowers customers to uncover, take action, and rapidly recover from cyberattacks – keeping data safe and businesses resilient. For over 25 years, more than 100,000 organizations and a vast partner ecosystem have relied on Commvault to reduce risks, improve governance, and do more with data.