Director of Software Security

Cadence Design Systems, Inc.; San Jose (CA); Presencial; USD 165.000 - 306.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

401(k) plan with employer match

Employee stock purchase plan

Medical, dental and vision coverage

Paid vacation and holidays

Descripción de la vacante

Cadence Design Systems, Inc. is seeking a Director of Software Security to lead the strategy, architecture, and execution of secure software development practices across the enterprise.

This role will drive DevSecOps transformation, ensure compliance with regulatory frameworks, and embed security throughout the software lifecycle. You will define reference architectures for secure microservices and cloud-native apps, lead threat modeling, oversee compliance programs (CMMC 2.0, NIST SP

Formación

• 12-15+ years in cybersecurity with strong focus on application security and DevSecOps.
• 5+ years in leadership at manager/director level.
• Deep expertise in secure SDLC, cloud-native architectures, container security, and regulatory frameworks.
• Experience in regulated industries (defense, government, healthcare, fintech).

Responsabilidades

• Define and execute enterprise DevSecOps strategy across development teams.
• Integrate security controls into CI/CD pipelines and promote shift-leftSecurity.
• Lead compliance initiatives for CMMC 2.0, NIST, ISO standards and oversee audits.
• Define secure architectures for microservices, APIs, and cloud-native apps.
• Oversee security in cloud platforms and IaC scanning, SBOM, and artifact signing.
• Build security champions program and partner with Engineering, Legal, and Compliance.

Conocimientos

DevSecOps Leadership

Secure SDLC

Threat Modeling

Cloud-native Security

Container Security

Regulatory Compliance

Security Strategy

Executive Communication

Herramientas

SAST tools

DAST tools

SCA tools

CI/CD tooling (Jenkins, GitHub Actions)

Kubernetes / Docker security

Zero Trust architectures

Descripción del empleo

SAN JOSE

Full time

At Cadence, we hire and develop leaders and innovators who want to make an impact on the world of technology.

Cadence InfoSec is seeking a Director of Software Security to lead the strategy, architecture, and execution of secure software development practices across the enterprise. This role will drive DevSecOps transformation, ensure compliance with regulatory frameworks (including CMMC), and embed security throughout the software lifecycle (SDLC).

Key Responsibilities

DevSecOps Strategy & Leadership

• Define and execute enterprise DevSecOps strategy across all development teams

• Integrate security controls into CI/CD pipelines (build, test, release)

• Establish shift-left security practices across the SDLC

• Drive adoption of secure coding, SAST, DAST, and SCA tools

Secure Software Architecture

• Define reference architectures for secure microservices, APIs, and cloud-native apps

• Establish security patterns for containers, Kubernetes, and serverless

• Lead threat modeling initiatives

• Ensure secure API design and zero trust principles

Regulatory Compliance & CMMC

• Lead compliance initiatives for:

• Cybersecurity Maturity Model Certification (CMMC 2.0)

• NIST SP 800-171r2 /800-53

• ISO 27001

• Ensure software systems meet federal, defense, and privacy regulations

• Coordinate audits, assessments, and continuous monitoring programs

• Implement controls for handling Controlled Unclassified Information (CUI)

Cloud & Platform Security

• Secure DevOps pipelines across cloud platforms:

• Amazon AWS

• Microsoft Azure

• Google Cloud

• IBMC cloud

• Cadence software service and products

• Implement infrastructure-as-code (IaC) security scanning

• Define secrets management, identity, and access controls

Application Security Program

• Build and scale AppSec program across all product lines

• Define vulnerability management lifecycle (discovery -> remediation -> validation)

• Establish bug bounty / responsible disclosure programs

• Integrate security into Agile and CI/CD workflows

Supply Chain & Software Integrity

• Secure software supply chain (SBOM, dependency scanning)

• Implement artifact signing, provenance, and integrity validation

Governance & Risk Management

• Define policies, standards, and secure development guidelines

• Establish KPIs: vulnerability remediation SLA, code coverage, pipeline security

• Align software security with enterprise risk management

• Report posture to executive leadership and board

Leadership & Cross-Functional Influence

• Lead teams of AppSec engineers, DevSecOps engineers, and architects

• Partner with Engineering, Product, Legal, and Compliance teams

• Build security champions program within development teams

• Influence engineering culture toward security ownership

Required Qualifications

• 12-15+ years in cybersecurity, with strong focus on application security and DevSecOps

• 5+ years in leadership (manager/director level)

• Deep expertise in:

• Secure SDLC and DevSecOps pipelines

• Cloud-native architectures and container security

• Regulatory frameworks (CMMC, NIST, ISO)

• Experience in regulated industries (defense, government, healthcare, fintech)

Preferred Qualifications

• Hands-on experience with tools such as:

• SAST: Checkmarx, Veracode

• DAST: Burp Suite

• SCA: Snyk, Black Duck

• CI/CD: Jenkins, GitHub Actions

• Familiarity with Kubernetes, Docker, and service mesh security

• Certifications:

• CISSP, CSSLP

• CISM or CCSP

• Experience with Zero Trust and identity-first security

Key Skills

• DevSecOps Transformation

• Secure Software Architecture

• Regulatory Compliance (CMMC, NIST, ISO)

• Application Security & Threat Modeling

• Software Supply Chain Security (SBOM, SLSA)

• Cloud & Container Security

• Executive Communication & Strategy

The annual salary range for California is $164,500 to $305,500. You may also be eligible to receive incentive compensation: bonus, equity, and benefits. Sales positions generally offer a competitive On Target Earnings (OTE) incentive compensation structure. Please note that the salary range is a guideline and compensation may vary based on factors such as qualifications, skill level, competencies and work location. Our benefits programs include: paid vacation and paid holidays, 401(k) plan with employer match, employee stock purchase plan, a variety of medical, dental and vision plan options, and more.

We’re doing work that matters. Help us solve what others can’t.

Equal Employment Opportunity Policy:

Cadence is committed to equal employment opportunity throughout all levels of the organization.

• Read the policy(opens in a new tab) (https://www.cadence.com/content/dam/cadence-www/global/en_US/documents/company/careers/equal-employment-opportunity-policy.pdf)

We welcome your interest in the company and want to make sure our job site is accessible to all. If you experience difficulty using this site or to request a reasonable accommodation, please contact [e-mail].

Privacy Policy:

Job Applicant If you are a job seeker creating a profile using our careers website, please see the privacy policy(opens in a new tab) (https://www.cadence.com/en_US/home/privacy/privacy-policy.html) .

E-Verify

Cadence participates in the E-Verify program in certain U.S. locations as required by law. Download More Information on E-Verify (64K) (https://www.cadence.com/content/dam/cadence-www/global/en_US/documents/company/careers/e-verify-participation-poster.pdf)

Cadence plays a critical role in creating the technologies that modern life depends on. We are a global electronic design automation company, providing software, hardware, and intellectual property to design advanced semiconductor chips that enable our customers create revolutionary products and experiences.

Thanks to the outstanding caliber of the Cadence team and the empowering culture that we have cultivated for over 25 years, Cadence continues to be recognized by Fortune Magazine as one of the 100 Best Companies to Work For. Our shared passion for solving the world’s toughest technical challenges, our dedication to pushing the limits of the industry, and our drive to do meaningful work differentiates the people of Cadence.

Cadence is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, sex, age, national origin, religion, sexual orientation, gender identity, status as a veteran, basis of disability, or any other protected class.

Cadence is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, sex, age, national origin, religion, sexual orientation, gender identity, status as a veteran, basis of disability, or any other protected class.