Software Security Architect

At Cadence, we hire and develop leaders and innovators who want to make an impact on the world of technology.

Cadence's Information Security team is seeking an experienced Software Security Architect. This role will focus on secure software development, security by design. The architect will work with the Cadence development teams ensuring security tool are integrated within the development environment, build, and artifactory level. As a member of the Information Security team, this role will Architect and lead the secure SDLC, including DAST, SAST, SCA, penetration testing, and attack surface management.

This role will interface directly with development teams. Of course, there is broad exposure to other aspects of information security related tasks such as vulnerability management, and deployment of security solutions. The successful candidate for this position is a highly motivated individual with a strong Software Development and Configuration Management/DevOps background that wants to educate and build a software security program.

Key Responsibilities:

• Integrate security practices/solutions into SDLC
• Build and perform software composition analysis in CI/CD pipeline
• Build Cadence artifactory using JFrog or SonaType
• DevOps integration - Jenkins, GitHub Actions, CircleCI etc.
• Prioritization and Remediation of software vulnerabilities

• Skills: Software development experience in C/C++; Python, TcL
• Github, Perforce experience
• Sonatype, JFrog experience
• Blackduck, Fortify, SonarQube, etc.

• Bachelor's degree in computer science, Information Security, or related field (or equivalent experience). Minimum 8 Years
• Preferred Certifications:

• (ISC)2 Certified Secure Software Lifecycle Professional (CSSLP)
• (ISC)² Certified Information Systems Security Professional (CISSP)
• (ISC)² Certified Cloud Security Professional (CCSP)

• Strong analytical and problem-solving abilities.
• Excellent communication and collaboration skills, especially with DevOps and engineering teams.