Software Security Architect

Cadence Design Systems, Inc.; San Jose (CA); On-site; USD 137,000 - 254,000; Full time

Benefits offered by this job

Bonus

Equity

401(k)

Health insurance

Paid vacation

Job summary

Cadence Design Systems, Inc. in San Jose, CA, seeks an experienced Software Security Architect to lead secure software development and security-by-design initiatives.

The architect will integrate security tools into development environments, CI/CD pipelines, and artifact management, and will lead the secure SDLC including DAST, SAST, SCA, and penetration testing. The role interfaces with development teams and requires a strong software development/DevOps background to educate teams on best

Qualifications

• Bachelor’s degree in CS, Information Security, or related field; 8+ years of experience.
• Experience integrating security into the SDLC and DevOps.
• Experience with DAST, SAST, SCA, and penetration testing.
• CI/CD experience with Jenkins, GitHub Actions, CircleCI.

Responsibilities

• Integrate security practices into SDLC.
• Build and perform software composition analysis in CI/CD pipeline.
• Build Cadence artifactory using JFrog or SonaType.
• DevOps integration – Jenkins, GitHub Actions, CircleCI etc.
• Prioritization and remediation of software vulnerabilities.

Skills

C/C++

Python

Tcl

Education

Bachelor’s degree in CS/InfoSec

CSSLP

CISSP

CCSP

Tools

Github

Perforce

Sonatype

JFrog

Blackduck

Fortify

SonarQube

Job description

SAN JOSE

Full time

R50300

At Cadence, we hire and develop leaders and innovators who want to make an impact on the world of technology.

Cadence’s Information Security team is seeking an experienced Software Security Architect. This role will focus on secure software development, security by design. The architect will work with the Cadence development teams ensuring security tool are integrated within the development environment, build, and artifactory level. As a member of the Information Security team, this role will Architect and lead the secure SDLC, including DAST, SAST, SCA, penetration testing, and attack surface management.

This role will interface directly with development teams. Of course, there is broad exposure to other aspects of information security related tasks such as vulnerability management, and deployment of security solutions. The successful candidate for this position is a highly motivated individual with a strong Software Development and Configuration Management/DevOps background that wants to educate and build a software security program.

Key Responsibilities:

• Integrate security practices/solutions into SDLC

• Build and perform software composition analysis in CI/CD pipeline

• Build Cadence artifactory using JFrog or SonaType

• DevOps integration – Jenkins, GitHub Actions, CircleCI etc.

• Prioritization and Remediation of software vulnerabilities

Required Technical Expertise:

• Skills: Software development experience in C/C++; Python, TcL

• Github, Perforce experience

• Sonatype, JFrog experience

• Blackduck, Fortify, SonarQube, etc.

Education:

• Bachelor’s degree in computer science, Information Security, or related field (or equivalent experience). Minimum 8 Years

• Preferred Certifications:

• (ISC)2 Certified Secure Software Lifecycle Professional (CSSLP)

• (ISC)² Certified Information Systems Security Professional (CISSP)

• (ISC)² Certified Cloud Security Professional (CCSP)

Soft Skills:

• Strong analytical and problem-solving abilities.

• Excellent communication and collaboration skills, especially with DevOps and engineering teams.

Job Location: San Jose, CA (onsite position)

The annual salary range for California is $136,500 to $253,500. You may also be eligible to receive incentive compensation: bonus, equity, and benefits. Sales positions generally offer a competitive On Target Earnings (OTE) incentive compensation structure. Please note that the salary range is a guideline and compensation may vary based on factors such as qualifications, skill level, competencies and work location. Our benefits programs include: paid vacation and paid holidays, 401(k) plan with employer match, employee stock purchase plan, a variety of medical, dental and vision plan options, and more.

We’re doing work that matters. Help us solve what others can’t.

E-Verify Cadence participates in the

E-Verify program in certain U.S. locations as required by law. Download More Information on E-Verify (64K) (https://www.cadence.com/content/dam/cadence-www/global/en_US/documents/company/careers/e-verify-participation-poster.pdf)

Cadence plays a critical role in creating the technologies that modern life depends on. We are a global electronic design automation company, providing software, hardware, and intellectual property to design advanced semiconductor chips that enable our customers create revolutionary products and experiences.

Thanks to the outstanding caliber of the Cadence team and the empowering culture that we have cultivated for over 25 years, Cadence continues to be recognized by Fortune Magazine as one of the 100 Best Companies to Work For. Our shared passion for solving the world’s toughest technical challenges, our dedication to pushing the limits of the industry, and our drive to do meaningful work differentiates the people of Cadence.

Cadence is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, sex, age, national origin, religion, sexual orientation, gender identity, status as a veteran, basis of disability, or any other protected class.

Cadence is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, sex, age, national origin, religion, sexual orientation, gender identity, status as a veteran, basis of disability, or any other protected class.