SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Commvault is seeking a Senior Application Security Tester to join its security team in Bengaluru. You will conduct comprehensive security testing on both on-premises and cloud-based applications, evaluating the security posture of web, mobile, and API-based systems using automated tools and manual techniques.
Key responsibilities include performing detailed application security testing (DAST, SAST, IAST) on internal and customer-facing applications; leading threat modeling and security assessments across the SDLC for both on-premises and cloud-hosted environments; utilizing automated security testing tools such as Burp Suite, OWASP ZAP, Fortify, Veracode, Checkmarx, and Snyk to identify vulnerabilities; manually validating and prioritizing security issues; collaborating with DevOps, Engineering, and Cloud teams; providing remediation guidance and validating fixes; conducting code reviews and secure code analysis; staying current on emerging threats and industry trends; documenting findings for technical and non-technical audiences; and mentoring junior security testers.
Required qualifications include a Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or related field; 5+ years of experience in application security testing or offensive security; deep understanding of OWASP Top 10, CWE/SANS Top 25, and security best practices; hands-on experience with AWS, Azure, or GCP environments; familiarity with RESTful APIs, microservices architecture, and container security (Docker, Kubernetes); experience testing GenAI solutions; strong scripting skills in Python, Bash, or PowerShell; and proficiency with static analysis tools (Fortify, Checkmarx, Veracode), dynamic analysis tools (Burp Suite Pro, OWASP ZAP, AppSpider), and software composition analysis tools (Snyk, Black Duck, White Source).
Preferred qualifications include relevant security certifications (OSCP, GWAPT, GPEN, CISSP, CSSLP); experience with Infrastructure-as-Code scanning (Terraform, CloudFormation); and knowledge of compliance frameworks (PCI-DSS, HIPAA, NIST, ISO 27001). Commvault offers continuous professional development, product training, career pathing, annual health check-ups, tuition reimbursement, inclusive company culture, community guilds, personal accident cover, and term life cover.
