Senior Software Security Architect

Senior Software Security Architect

The Opportunity:

We are seeking a highly skilled Senior Software Security Architect to lead the design and evaluation of secure software architectures across a diverse range of systems and applications. The ideal candidate will have deep expertise in security architecture review and threat modeling, with a strong understanding of modern software development practices and security best practices. Experience with automated tools for security architecture analysis and relevant security certifications is strongly preferred.

What you’ll do…

• Conduct in-depth security architecture reviews across cloud, on-premises, and hybrid environments.
• Perform threat modeling to identify potential security risks and define mitigation strategies early in the development of lifecycle.
• Work closely with development teams, DevOps, and product owners to design secure systems and guide secure software design decisions.
• Evaluate and implement automated tools to support architecture reviews and continuous security assessments.
• Create and maintain security architecture documentation and reusable patterns.
• Provide expert guidance on security controls, design patterns, and industry best practices.
• Contribute to the development and improvement of internal security standards, frameworks, and processes.
• Stay current on emerging threats, vulnerabilities, and regulatory requirements

Who you are?

• 5+ years of experience in application or software security architecture.
• Strong knowledge of threat modeling methodologies (e.g., STRIDE, PASTA, OCTAVE).
• Hands-on experience conducting security architecture reviews for complex systems.
• Familiarity with automated security architecture tools (e.g., IriusRisk, ThreatModeler, Microsoft Threat Modeling Tool, or similar).
• Experience in reviewing architecture GenAI solutions
• Strong understanding of secure coding practices, software development lifecycle (SDLC), and DevSecOps integration.
• Excellent communication skills to collaborate with both technical and non-technical stakeholders.

Preferred Qualifications:

• Relevant certifications such as CSSLP, CISSP, SABSA, TOGAF, or GICSP.
• Experience in regulated environments (e.g., finance, healthcare, or critical infrastructure).
• Familiarity with cloud platforms (AWS, Azure, GCP) and associated security architectures.
• Experience working in Agile or CI/CD environments.

You’ll love working here because...

• Continuous professional development, product training, and career pathing
• Annual health check-ups, Tuition Reimbursement
• An inclusive company culture, an opportunity to join our Community Guilds
• Personal accident cover and Term life cover

Ready to #makeyourmark at Commvault? Apply now!

#LI-RK1