Software Security Architect

Cadence Design Systems; San Jose (CA); Hybrid; USD 137,000 - 254,000; Full time

Benefits offered by this job

Paid vacation and holidays

401(k) plan with employer match

Employee stock purchase plan

Medical, dental and vision options

Job summary

Cadence Design Systems in San Jose, CA seeks an experienced Software Security Architect to lead secure SDLC initiatives. You will integrate security tools into CI/CD pipelines, perform SCA/DAST/SAST, and work with development teams to remediate vulnerabilities.

The role requires strong C/C++ and Python skills, DevOps experience, and CI/CD tooling expertise. Onsite position with competitive salary and benefits.

Qualifications

• Bachelor's degree in Computer Science or related field or equivalent experience.
• Strong development experience in C/C++ with security focus.
• Experience integrating security tools into CI/CD and SDLC.

Responsibilities

• Integrate security practices into the SDLC and CI/CD pipelines.
• Lead software composition analysis in the CI/CD workflow.
• Integrate and manage security tooling in the build/artifactory flow.
• Collaborate with DevOps and engineering teams to remediate vulnerabilities.
• Architect secure software development programs and governance.

Skills

C/C++

Python

GitHub

Perforce

CI/CD

Education

Bachelor's degree in Computer Science or related field

Tools

Jenkins

GitHub Actions

CircleCI

JFrog

Sonatype

Fortify

SonarQube

Job description

At Cadence, we hire and develop leaders and innovators who want to make an impact on the world of technology. Cadence’s Information Security team is seeking an experienced Software Security Architect. This role will focus on secure software development, security by design. The architect will work with the Cadence development teams ensuring security tool are integrated within the development environment, build, and artifactory level. As a member of the Information Security team, this role will Architect and lead the secure SDLC, including DAST, SAST, SCA, penetration testing, and attack surface management. This role will interface directly with development teams. Of course, there is broad exposure to other aspects of information security related tasks such as vulnerability management, and deployment of security solutions. The successful candidate for this position is a highly motivated individual with a strong Software Development and Configuration Management/DevOps background that wants to educate and build a software security program.

Key Responsibilities

• Integrate security practices/solutions into SDLC
• Build and perform software composition analysis in CI/CD pipeline
• Build Cadence artifactory using JFrog or SonaType
• DevOps integration – Jenkins, GitHub Actions, CircleCI etc.
• Prioritization and Remediation of software vulnerabilities

Required Technical Expertise

• Software development experience in C/C++
• Python
• TcL Github, Perforce experience
• Sonatype, JFrog experience
• Blackduck, Fortify, SonarQube, etc.

Education

Bachelor’s degree in computer science, Information Security, or related field (or equivalent experience).

Preferred Certifications

• (ISC)2 Certified Secure Software Lifecycle Professional (CSSLP)
• (ISC)² Certified Information Systems Security Professional (CISSP)
• (ISC)² Certified Cloud Security Professional (CCSP)

Soft Skills

• Strong analytical and problem-solving abilities.
• Excellent communication and collaboration skills, especially with DevOps and engineering teams.

Job Location

San Jose, CA (onsite position)

Salary

The annual salary range for California is $136,500 to $253,500. You may also be eligible to receive incentive compensation: bonus, equity, and benefits. Sales positions generally offer a competitive On Target Earnings (OTE) incentive compensation structure. Please note that the salary range is a guideline and compensation may vary based on factors such as qualifications, skill level, competencies and work location.

Benefits

• paid vacation and paid holidays
• 401(k) plan with employer match
• employee stock purchase plan
• a variety of medical, dental and vision plan options
• and more.

Equal Employment Opportunity

Cadence is committed to equal employment opportunity throughout all levels of the organization. Cadence is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, sex, age, national origin, religion, sexual orientation, gender identity, status as a veteran, basis of disability, or any other protected class.

Read the policy(opens in a new tab)

We welcome your interest in the company and want to make sure our job site is accessible to all. If you experience difficulty using this site or to request a reasonable accommodation, please contact [e-mail].

Privacy Policy: Job Applicant If you are a job seeker creating a profile using our careers website, please see the privacy policy(opens in a new tab).

E-Verify Cadence participates in the E-Verify program in certain U.S. locations as required by law. Download More Information on E-Verify (64K)

Cadence plays a critical role in creating the technologies that modern life depends on. We are a global electronic design automation company, providing software, hardware, and intellectual property to design advanced semiconductor chips that enable our customers create revolutionary products and experiences. Thanks to the outstanding caliber of the Cadence team and the empowering culture that we have cultivated for over 25 years, Cadence continues to be recognized by Fortune Magazine as one of the 100 Best Companies to Work For.

Our shared passion for solving the world’s toughest technical challenges, our dedication to pushing the limits of the industry, and our drive to do meaningful work differentiates the people of Cadence.