IT- Staff Software Security Engineer

Cadence; Dadri; On-site; INR 4,200,000 - 6,800,000; Full time

Job summary

Cadence is seeking a Sr. Software Security Engineer to strengthen our security controls for cloud and on-premise software. You will integrate security tooling in source control and CI/CD, support DAST/SAST/SCA, and drive secure development practices across the team.

You will work closely with development groups, handle vulnerability management, incident response, and security monitoring, reporting to the Group Director and contributing to enterprise security initiatives.

Qualifications

• Experience in securing corporate environments.
• Experience with risk management and compliance frameworks (NIST, ISO 27001, CIS).
• Security across Windows, Linux, and Mac environments.

Responsibilities

• Develop and support secure SDLC with DAST, SAST, SCA and pen testing.
• Integrate security tools at source control and build environments (Perforce, Github, CI/CD).
• Manage attack surface, incident response, vulnerability management, and deployment of security solutions.
• Collaborate with development teams and interface with security groups.

Skills

Security engineering

NIST

ISO 27001

CIS

Windows security

Linux security

Mac security

Risk management

Vulnerability assessment

Network security

SIEM

Cloud security

Incident response

Forensics

Security monitoring

Education

Engineering (Computers, Electronics, IT) or equivalent

Tools

Perforce

Github

CI/CD

Artifactory

Job description

At Cadence, we hire and develop leaders and innovators who want to make an impact on the world of technology.

Job Description

Position: IT- Staff Software Security Engineer
Grade: IT4
Location: Noida/Hyderabad

Job Description:

Role:

Cadence s Information Security team is seeking a Sr. Software Security Engineer. This role will focus on Cloud and on-premise Software Security controls including WAF and CDN tools. This is a Security Development Operations role that will ensure security tool integration at the source code repo (Perforce, Github etc. ), build environment, and artifactory level. As a member of the Information Security team, this role will develop and support the secure software develop life cycle, including DAST, SAST, SCA, penetration testing, and attack surface management.

This role reports to Group Director and will interface directly with development teams. Of course, there is broad exposure to other aspects of information security related tasks such as incident response, vulnerability management, and deployment of security solutions. The successful candidate for this position is a highly motivated individual with a strong Application Development and Configuration Management/DevOps background with hands-on experience in building software security within CI/CD.

Required Skills Qualification

• Hands-on experience in securing corporate environment.

• Hands-on experience in security frameworks (NIST, ISO 27001, CIS) and experience with risk management and compliance

• Hands-on experience securing Windows (Workstations and Servers), Linux (Workstations and Servers), and Mac

• Hands-on experience conducting risk management by identifying gaps and providing strategies for mitigation.

• Hands-on experience documenting vulnerability assessment results in a clear and actionable format.

• Expertise in network security, firewalls, IDS/IPS, and security monitoring tools such as SIEM

• Proficiency with cloud security technologies (AWS, Azure, GCP) and securing cloud-based infrastructure.

• Experience with incident response, forensics, and managing security incidents from detection to resolution.

• Determines security violations and inefficiencies.

• Knowledge of mergers and acquisitions

Experience:

Should have relevant experience of at least 10-15 years.

Qualification:

Engineering (Computers, Electronics, IT) or equivalent

We re doing work that matters. Help us solve what others can t.