Full-Time
Senior Security Operations Engineer
Updated on 9/3/2026
Commvault
1,001-5,000 employees
Data protection software and services provider
No salary listed
Bengaluru, Karnataka, India
In Person
On-site in Bangalore, India.
 Cybersecurity (1) |
|---|
Get referred to Commvault
See people who can refer or advise you
- 6+ years of software engineering experience with a focus on security automation or application security
- Proficiency in Python, Ruby, Go, Java, or similar programming languages
- Strong understanding of application security principles, vulnerabilities (e.g., OWASP Top Ten), and remediation techniques
- Hands-on experience implementing and configuring security scanning tools such as SAST (e.g., Checkmarx, Fortify), DAST (e.g., Burp Suite, OWASP ZAP), and SCA (e.g., Snyk, WhiteSource)
- Familiarity with CI/CD pipelines (e.g., Jenkins, GitHub Actions, GitLab CI) and infrastructure as code tools (e.g., Terraform, Ansible) is a plus
- Solid understanding of software development lifecycle (SDLC) processes and how to integrate security automation seamlessly
- Excellent problem-solving skills and ability to work independently and as part of a team
- Design / build / implement and maintain scalable automation tools and pipelines for application security, including static (SAST), dynamic (DAST), and software composition analysis (SCA) scanning
- Collaborate with developers, security engineers, and DevOps teams to integrate security automation seamlessly into CI/CD workflows
- Identify opportunities for improving security tool coverage, efficiency, and performance
- Develop custom scripts, plugins, or APIs to extend the capabilities of security testing and remediation automation
- Monitor and analyze security automation tool results, generate actionable insights, and support incident response and remediation efforts
- Stay up to date on the latest security automation trends, technologies, and best practices, and advocate for continuous improvement in tooling and processes
- Provide mentorship and guidance to other engineers on secure coding and secure development lifecycle practices
- Experience with cloud-native security automation (e.g., in AWS, Azure, or GCP environments)
- Familiarity with container security (e.g., Docker, Kubernetes) and related security scanning solutions
- Knowledge of threat modeling and security risk assessments
Commvault provides data protection and information management software and services that help organizations back up, recover, migrate, and govern data across on‑premises, cloud, and hybrid environments. Its software uses agents and components to manage backups, replication, and recovery, with licenses or subscriptions granting ongoing access plus support and training. It differentiates itself by offering an integrated suite for backup, recovery, migration, and information governance along with consulting and education for a wide range of industries, including regulated sectors. The goal is to help customers protect data, manage it efficiently, and derive maximum value from their data-management investments.
Company Size
1,001-5,000
Company Stage
IPO
Headquarters
Tinton Falls, New Jersey
Founded
1996
Get referred to Commvault
See people who can refer or advise you
Simplify's Take
What believers are saying
- Q1 fiscal 2027 subscription revenue hit $267 million, up 16%, with SaaS revenue above $100 million.
- Free cash flow jumped 71% to $51 million, funding buybacks and strategic flexibility.
- April 2026 Goldman Sachs review and Thoma Bravo interest keep an acquisition premium alive.
What critics are saying
- July 2026 guidance stayed flat, and Piper Sandler downgraded CVLT on July 28.
- Static Q2 subscription guidance implies decelerating sequential growth despite Q1's strong numbers.
- Rubrik and cloud-native rivals pressure pricing; if ARR growth slips, Commvault's premium valuation collapses.
What makes Commvault unique
- Commvault Cloud Unity unifies data security, cyber recovery, and identity resilience across environments.
- August 2026 Cloud Rewind recovery spans 62% of enterprise-relevant Azure resource types.
- Commvault's Google threat intelligence integration automates clean restore decisions after ransomware attacks.
Help us improve and share your feedback! Did you find this helpful?
Benefits
Employee Stock Purchase Plan
Professional Development Budget
Growth & Insights and Company News
6 month growth
↑ 0%1 year growth
↑ 1%2 year growth
↑ 3%Commvault integrated Google's threat intelligence into its recovery workflows on 3 August, allowing the system to automatically determine whether backed-up data is safe to restore after a cyberattack. The integration combines Mandiant's research, VirusTotal's malware data, and Google threat signals with Commvault's existing Threat Scan tool. The company reported strong subscription growth in its fiscal first quarter, with subscription revenue reaching $267 million, up 16% year over year. SaaS revenue crossed $100 million, up 39%, whilst subscription annualized recurring revenue climbed 22% to $1,054 million. However, GAAP operating margin was 8.2%, significantly below the non-GAAP margin of 22.8%. Second quarter subscription revenue guidance of $264 million to $268 million suggests flat growth. Hedge fund ownership dropped from 36 funds to 28, whilst short interest stands at 9.07% of the float.
Commvault expanded its Cloud Rewind platform on 18 August, tripling the number of Microsoft Azure resource types it can protect and recover after cyberattacks or outages. The update reaches 62% of enterprise-relevant Azure resource types, though coverage for AWS and Google Cloud was not mentioned. The company reported fiscal first quarter 2027 results on 28 July, with subscription revenue rising 16% year over year to $267 million. Subscription annualised recurring revenue reached $1,054 million, up 22%, whilst SaaS revenue crossed $100 million for the first time, up 39%. Free cash flow jumped 71% to $51 million. However, guidance for second-quarter subscription revenue of $264 million to $268 million suggests flat sequential growth. Hedge fund ownership fell from 36 funds to 28 in the most recent quarter.
Commvault Systems' subsidiary Clumio has achieved FedRAMP Class C Moderate Ready status and gained a listing in the FedRAMP Marketplace, marking a significant development for the company's federal-facing cyber resilience offerings. Commvault's share price has climbed 5.3% over the past month and 8.2% over the past quarter. However, the one-year total shareholder return is down 26.5%, whilst the three-year return is up 94.4%. The company's most followed valuation narrative puts fair value at $161.15 compared with the last close of $131.56, suggesting an 18.4% undervaluation. This is supported by 63% SaaS ARR growth, a 45% increase in multi-product customers, and 125% SaaS net dollar retention. However, the stock trades at 79.8x earnings, versus 30.7x for the US software industry and a fair ratio of 37.7x, indicating a potentially rich valuation.
Commvault brings cyber resilience to the forefront of Saudi Arabia's cloud and AI era at LEAP 2026. Commvault (NASDAQ: CVLT), a leader in unified resilience at enterprise scale, concluded its participation at LEAP 2026, reaffirming its commitment to helping enterprises embed cyber resilience into Saudi Arabia's accelerating cloud and AI transformation. Arabs& Middle Easterners At the event, Commvault was present at the Microsoft, Logicom and Axelerated booths where the executives engaged with customers, partners, and industry stakeholders to discuss the evolving resilience requirements in the age of AI, cloud adoption and the growth of critical digital services across the Kingdom. Commvault used the event as a platform to deepen relationships with key partners, customers and prospects across the region, laying the groundwork for new collaborations, with more news to follow in the coming months. Discover more Security Products & Services real estate LEAP 2026 highlighted Commvault's growing collaboration with Microsoft and its plans to support customers as more critical cloud and AI workloads move to local infrastructure in the Kingdom. Under the multi-year strategic partnership announced by both companies in June 2026, Commvault's AI and cyber resilience technologies are being integrated and delivered as a native ISV service on Microsoft Azure. The partnership will enable organisations to embed backup and recovery capabilities directly into the Azure environments where their critical workloads operate, helping them protect and recover data, applications and identities following cyberattacks, outages or human error. The partnership comes at an opportune moment as Saudi Arabia accelerates its cloud and AI ambitions under Vision 2030. With the Kingdom's data centre capacity reaching 467 MW in early 2026 and Microsoft's Saudi Arabia East region expected to become available in Q4, organisations must embed cyber resilience into local cloud environments from the outset. Arabs& Middle Easterners Dr. Mazen Abduljabbar, Country Manager - Kingdom of Saudi Arabia at Commvault, said, "The conversations we had at LEAP 2026 reflected how rapidly Saudi Arabia is moving from AI experimentation to large-scale implementation, supported by the expansion of local cloud infrastructure. As this momentum builds, resilience must keep pace. Keeping workloads and data in-country is only part of the equation; organisations must also be confident that they can recover critical applications, data and identities quickly and cleanly when disruption occurs. LEAP reinforced why recovery must remain central to the Kingdom's growing cloud and AI ambitions." Discover more Geographic Reference REAL ESTATE Throughout LEAP, Commvault outlined how it brings cyber resilience to an AI-driven world through Commvault Cloud Unity, a unified platform for data security, cyber recovery and identity resilience across environments. The platform provides organisations a single experience for managing resilience across increasingly complex multi-cloud environments while supporting their security, recovery and compliance requirements. Middle East News 247 produces the latest news for the Middle East region, with a key focus on the GCC nations: UAE, Saudi Arabia, Qatar, Bahrain, Kuwait, and Oman. Contact News Desk: [email protected] Follow Me:
Gary Merrill, chief financial officer of Commvault Systems, sold 3,147 shares of common stock on 18 and 19 August 2026. The sale was executed to cover tax obligations from vesting restricted and performance stock units and does not reflect the insider's view on the stock. The transaction was carried out under a pre-established Rule 10b5-1 plan adopted on 20 November 2024 and amended on 13 June 2025. Following the sale, Merrill retains 69,628 shares worth $9.56 million as of 19 August 2026. Commvault Systems reported trailing twelve-month revenue of $1.2 billion and net income of $68 million. The company provides cyber resilience platforms for data protection and recovery across on-premises and cloud environments.