Senior Software Security Architect

Responsibilities

• Conduct in-depth security architecture reviews across cloud, on-premises, and hybrid environments
• Perform threat modeling to identify potential security risks and define mitigation strategies early in the development lifecycle
• Work closely with development teams, DevOps, and product owners to design secure systems and guide secure software design decisions
• Evaluate and implement automated tools to support architecture reviews and continuous security assessments
• Create and maintain security architecture documentation and reusable patterns
• Provide expert guidance on security controls, design patterns, and industry best practices
• Contribute to the development and improvement of internal security standards, frameworks, and processes

Requirements

• 5+ years of experience in application or software security architecture
• Strong knowledge of threat modeling methodologies (e.g., STRIDE, PASTA, OCTAVE)
• Hands-on experience conducting security architecture reviews for complex systems
• Familiarity with automated security architecture tools (e.g., IriusRisk, ThreatModeler, or Microsoft Threat Modeling Tool)
• Experience in reviewing architecture for GenAI solutions
• Strong understanding of secure coding practices, SDLC, and DevSecOps integration
• Excellent communication skills to collaborate with both technical and non-technical stakeholders

Preferred Qualifications

• Relevant certifications such as CSSLP, CISSP, SABSA, TOGAF, or GICSP
• Experience in regulated environments (e.g., finance, healthcare, or critical infrastructure)
• Familiarity with cloud platforms (AWS, Azure, GCP) and associated security architectures
• Experience working in Agile or CI/CD environments

Benefits

• Continuous professional development, product training, and career pathing
• Annual health check-ups and Tuition Reimbursement
• Inclusive company culture and Community Guilds
• Personal accident cover and Term life cover

About the Company

Commvault (NASDAQ: CVLT) is the gold standard in cyber resilience. The company empowers customers to uncover, take action, and rapidly recover from cyberattacks – keeping data safe and businesses resilient. For over 25 years, more than 100,000 organizations and a vast partner ecosystem have relied on Commvault to reduce risks, improve governance, and do more with data.