Director, Secure SDLC & DevSecOps Strategy

Cadence Design Systems; San Jose (CA); On-site; USD 164,500 - 305,500; Full time

Benefits offered by this job

Paid vacation

401(k) plan with employer match

Employee stock purchase plan

Various medical, dental, and vision plan options

Job summary

Cadence Design Systems in San Jose is looking for a Director of Software Security to lead the strategy for secure software development practices across the organization. This role focuses on driving DevSecOps transformation, ensuring compliance with regulatory frameworks, and embedding security throughout the software lifecycle.

The ideal candidate will have over 12 years of experience in cybersecurity, strong leadership skills, and expertise in regulatory compliance including CMMC and NIST. The role includes competitive compensation and a comprehensive benefits package.

Qualifications

• 12-15+ years in cybersecurity, strong focus on application security and DevSecOps.
• 5+ years in leadership roles.
• Deep expertise in Secure SDLC and cloud-native architectures.
• Experience in regulated industries like defense or healthcare.

Responsibilities

• Define and execute enterprise DevSecOps strategy.
• Integrate security controls into CI/CD pipelines.
• Lead compliance initiatives for CMMC and NIST.
• Manage and lead teams of AppSec and DevSecOps engineers.

Skills

DevSecOps Transformation

Secure Software Architecture

Regulatory Compliance (CMMC, NIST, ISO)

Application Security & Threat Modeling

Software Supply Chain Security (SBOM, SLSA)

Cloud & Container Security

Executive Communication & Strategy

Tools

SAST (Checkmarx, Veracode)

DAST (Burp Suite)

SCA (Snyk, Black Duck)

CI/CD (Jenkins, GitHub Actions)

Kubernetes

Docker

Job description

Cadence Design Systems in San Jose is looking for a Director of Software Security to lead the strategy for secure software development practices across the organization. This role focuses on driving DevSecOps transformation, ensuring compliance with regulatory frameworks, and embedding security throughout the software lifecycle.

The ideal candidate will have over 12 years of experience in cybersecurity, strong leadership skills, and expertise in regulatory compliance including CMMC and NIST. The role includes competitive compensation and a comprehensive benefits package.