Software Security Architect

Cadence; San Jose (CA); On-site; USD 136,500 - 253,500; Full time

Benefits offered by this job

Paid vacation

401(k) plan with employer match

Employee stock purchase plan

Medical, dental, and vision plan options

Job summary

Cadence is looking for a Software Security Architect to join their Information Security team in San Jose, CA. The role emphasizes secure software development and collaboration with development teams to integrate security tools into the SDLC.

The ideal candidate will have strong software development experience, ideally in C/C++ and Python, along with a minimum of 8 years in the field. The position includes attractive benefits and a competitive salary range from $136,500 to $253,500.

Qualifications

• Minimum 8 years of experience in software development.
• Strong analytical and problem-solving abilities.
• Excellent communication skills with DevOps teams.

Responsibilities

• Integrate security practices/solutions into SDLC.
• Build and perform software composition analysis in CI/CD pipeline.
• DevOps integration with Jenkins, GitHub Actions, CircleCI.
• Prioritize and remediate software vulnerabilities.

Skills

Software development experience in C/C++

Python

TcL

Github experience

Perforce experience

Sonatype experience

JFrog experience

Blackduck

Fortify

SonarQube

Education

Bachelor’s degree in computer science, Information Security, or related field

Job description

At Cadence, we hire and develop leaders and innovators who want to make an impact on the world of technology. Cadence’s Information Security team is seeking an experienced Software Security Architect. This role will focus on secure software development, security by design. The architect will work with the Cadence development teams ensuring security tools are integrated within the development environment, build, and artifactory level. As a member of the Information Security team, this role will Architect and lead the secure SDLC, including DAST, SAST, SCA, penetration testing, and attack surface management. This role will interface directly with development teams. Of course, there is broad exposure to other aspects of information security related tasks such as vulnerability management, and deployment of security solutions. The successful candidate for this position is a highly motivated individual with a strong Software Development and Configuration Management/DevOps background that wants to educate and build a software security program.

Key Responsibilities

• Integrate security practices/solutions into SDLC
• Build and perform software composition analysis in CI/CD pipeline
• Build Cadence artifactory using JFrog or SonaType
• DevOps integration – Jenkins, GitHub Actions, CircleCI etc.
• Prioritization and Remediation of software vulnerabilities

Required Technical Expertise

• Skills: Software development experience in C/C++; Python, TcL
• Github, Perforce experience
• Sonatype, JFrog experience
• Blackduck, Fortify, SonarQube, etc.

Education

• Bachelor’s degree in computer science, Information Security, or related field (or equivalent experience). Minimum 8 Years
• Preferred Certifications:
  • ISC)2 Certified Secure Software Lifecycle Professional (CSSLP)
  • ISC)² Certified Information Systems Security Professional (CISSP)
  • ISC)² Certified Cloud Security Professional (CCSP)

Soft Skills

• Strong analytical and problem-solving abilities.
• Excellent communication and collaboration skills, especially with DevOps and engineering teams.

Job Location

San Jose, CA (onsite position)

The annual salary range for California is $136,500 to $253,500. You may also be eligible to receive incentive compensation: bonus, equity, and benefits. Please note that the salary range is a guideline and compensation may vary based on factors such as qualifications, skill level, competencies and work location. Our benefits programs include: paid vacation and paid holidays, 401(k) plan with employer match, employee stock purchase plan, a variety of medical, dental and vision plan options, and more.