About the role
Senior Software Security Architect
The Opportunity:
We are seeking a highly skilled Senior Software Security Architect to lead the design and evaluation of secure software architectures across a diverse range of systems and applications. The ideal candidate will have deep expertise in security architecture review and threat modeling, with a strong understanding of modern software development practices and security best practices. Experience with automated tools for security architecture analysis and relevant security certifications is strongly preferred.
What you’ll do…
- Conduct in-depth security architecture reviews across cloud, on-premises, and hybrid environments.
- Perform threat modeling to identify potential security risks and define mitigation strategies early in the development of lifecycle.
- Work closely with development teams, DevOps, and product owners to design secure systems and guide secure software design decisions.
- Evaluate and implement automated tools to support architecture reviews and continuous security assessments.
- Create and maintain security architecture documentation and reusable patterns.
- Provide expert guidance on security controls, design patterns, and industry best practices.
- Contribute to the development and improvement of internal security standards, frameworks, and processes.
- Stay current on emerging threats, vulnerabilities, and regulatory requirements
Who you are?
- 5+ years of experience in application or software security architecture.
- Strong knowledge of threat modeling methodologies (e.g., STRIDE, PASTA, OCTAVE).
- Hands-on experience conducting security architecture reviews for complex systems.
- Familiarity with automated security architecture tools (e.g., IriusRisk, ThreatModeler, Microsoft Threat Modeling Tool, or similar).
- Experience in reviewing architecture GenAI solutions
- Strong understanding of secure coding practices, software development lifecycle (SDLC), and DevSecOps integration.
- Excellent communication skills to collaborate with both technical and non-technical stakeholders.
Preferred Qualifications:
- Relevant certifications such as CSSLP, CISSP, SABSA, TOGAF, or GICSP.
- Experience in regulated environments (e.g., finance, healthcare, or critical infrastructure).
- Familiarity with cloud platforms (AWS, Azure, GCP) and associated security architectures.
- Experience working in Agile or CI/CD environments.
You’ll love working here because...
- Continuous professional development, product training, and career pathing
- Annual health check-ups, Tuition Reimbursement
- An inclusive company culture, an opportunity to join our Community Guilds
- Personal accident cover and Term life cover
Ready to #makeyourmark at Commvault? Apply now!
#LI-RK1