Verified today
Senior Security Operations Engineer
About the role
Security Operations team at Commvault builds and maintains automation tools that embed application security into the software delivery pipeline. The engineer designs, implements, and supports scalable SAST, DAST, and SCA scanning pipelines, integrates them with CI/CD workflows, and creates custom scripts and plugins for remediation. Works on‑site in Bangalore, collaborating with developers, security engineers, and DevOps to improve security coverage and mentor peers.
What you’ll do
- Design and build automation pipelines for static, dynamic, and composition analysis scanning
- Integrate security tools into CI/CD workflows and infrastructure as code
- Develop custom scripts, plugins, or APIs to extend security testing capabilities
- Monitor tool results, generate actionable insights, and support incident response
- Identify and implement improvements to tool coverage, efficiency, and performance
- Mentor engineers on secure coding practices and secure development lifecycle
- Stay current with security automation trends and advocate for process enhancements
What you’ll bring
- 6+ years software engineering with security automation focus
- Proficiency in Python, Ruby, Go, or Java
- Experience with SAST tools (Checkmarx, Fortify)
- Experience with DAST tools (Burp Suite, OWASP ZAP)
- Experience with SCA tools (Snyk, WhiteSource)
- Familiarity with CI/CD pipelines (Jenkins, GitHub Actions, GitLab CI)
- Knowledge of OWASP Top Ten and secure SDLC
- Understanding of cloud‑native security automation (AWS, Azure, GCP)