Commvault logo
CommvaultPosted 2 months ago

Senior Security Operations Engineer

On-siteBengaluru, Karnataka, India

Part TimeSenior LevelLarge

Job Summary

Design and maintain scalable automation pipelines for application security, covering static, dynamic, and software composition analysis scanning. Collaborate with developers and DevOps teams to integrate these tools into CI/CD workflows, while developing custom scripts and APIs to extend testing capabilities. Monitor tool results to generate actionable insights for incident response and advocate for continuous improvement in security tooling and processes. Provide mentorship on secure coding practices and stay current on automation trends. Requires 6+ years of software engineering experience with proficiency in Python, Ruby, Go, or Java, plus hands-on configuration of SAST, DAST, and SCA tools. Full-time role in San Francisco, CA, offering competitive salary and comprehensive benefits.

Required Qualifications

  • 6+ years of software engineering experience with a focus on security automation or application security
  • Proficiency in Python, Ruby, Go, Java, or similar programming languages
  • Strong understanding of application security principles, vulnerabilities (e.g., OWASP Top Ten), and remediation techniques
  • Hands-on experience implementing and configuring security scanning tools such as SAST (e.g., Checkmarx, Fortify), DAST (e.g., Burp Suite, OWASP ZAP), and SCA (e.g., Snyk, WhiteSource)
  • Solid understanding of software development lifecycle (SDLC) processes and how to integrate security automation seamlessly
  • Excellent problem-solving skills and ability to work independently and as part of a team

Desired Qualifications

  • Familiarity with CI/CD pipelines (e.g., Jenkins, GitHub Actions, GitLab CI) and infrastructure as code tools (e.g., Terraform, Ansible)
  • Experience with cloud-native security automation (e.g., in AWS, Azure, or GCP environments)
  • Familiarity with container security (e.g., Docker, Kubernetes) and related security scanning solutions
  • Knowledge of threat modeling and security risk assessments

Hiring someone like this?

Get your role in front of qualified candidates on Sorce.

Get started

Apply to this job in one click with Sorce

Apply on Sorce