At a Glance
Cadence’s Information Security team is seeking an experienced Software Security Architect. This role will focus on secure software development, security by design. The architect will work with the Cadence development teams ensuring security tool are integrated within the development environment, build, and artifactory level. As a member of the Information Security team, this role will Architect and lead the secure SDLC, including DAST, SAST, SCA, penetration testing, and attack surface management.
This role will interface directly with development teams. Of course, there is broad exposure to other aspects of information security related tasks such as vulnerability management, and deployment of security solutions. The successful candidate for this position is a highly motivated individual with a strong Software Development and Configuration Management/DevOps background that wants to educate and build a software security program.
Key Responsibilities:
Integrate security practices/solutions into SDLC
Build and perform software composition analysis in CI/CD pipeline
Build Cadence artifactory using JFrog or SonaType
DevOps integration – Jenkins, GitHub Actions, CircleCI etc.
Prioritization and Remediation of software vulnerabilities
Required Technical Expertise:
Skills: Software development experience in C/C++; Python, TcL
Github, Perforce experience
Sonatype, JFrog experience
Blackduck, Fortify, SonarQube, etc.
Education:
Bachelor’s degree in computer science, Information Security, or related field (or equivalent experience). Minimum 8 Years
Preferred Certifications:
(ISC)2 Certified Secure Software Lifecycle Professional (CSSLP)
(ISC)² Certified Information Systems Security Professional (CISSP)
(ISC)² Certified Cloud Security Professional (CCSP)
Soft Skills:
Strong analytical and problem-solving abilities.
Excellent communication and collaboration skills, especially with DevOps and engineering teams.
Job Location: San Jose, CA (onsite position)
The annual salary range for California is $136,500 to $253,500. You may also be eligible to receive incentive compensation: bonus, equity, and benefits. Sales positions generally offer a competitive On Target Earnings (OTE) incentive compensation structure. Please note that the salary range is a guideline and compensation may vary based on factors such as qualifications, skill level, competencies and work location. Our benefits programs include: paid vacation and paid holidays, 401(k) plan with employer match, employee stock purchase plan, a variety of medical, dental and vision plan options, and more.
Source: Cadence careers · View original posting
Cadence Design Systems, Inc. is a multinational technology company that specializes in electronic design automation (EDA) software, hardware, and services. The company provides computational software and engineering solutions that facilitate the design and development of electronic systems, including chips and complete systems-on-chips. Their tools are utilized in various applications such as AI, 5G, automotive, hyperscale computing, and aerospace. Cadence offers a range of EDA software for designing, verifying, and optimizing electronic systems. Their hardware platforms, including emulation and prototyping systems, support faster design validation. Additionally, the company provides engineering and methodology services to assist customers in effectively implementing EDA tools, along with intellectual property cores for reusable design blocks.
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
Security Team
Cadence's Information Security team is principally responsible for identifying security matters, and the Audit Committee receives semi-annual reports on cybersecurity. Tarak Ray serves as Senior Vice President and Chief Information Officer since 2022. No public, named AppSec manager or CISO-specific profile was found. The team size estimate is not publicly available. As of, there was one active AppSec job posting for a Software Security Architect (Job ID: R50300). Common skill and tool patterns from this posting include architecting and leading secure SDLC, DAST, SAST, SCA, penetration testing, attack surface management, building artifactory using JFrog or SonaType, and familiarity with Blackduck, Fortify, and SonarQube. No public org chart or reporting line explicitly states whether AppSec is centralized or embedded.
Key Initiatives
Cadence practices 'shift-left security' within the SDLC, integrating security tools at the source code repository, build, and artifact levels, and incorporating static application security testing (SAST) into scheduled and ad-hoc builds. For vulnerability management, open-source software (OSS) security is enforced through vetted components, and released products undergo dynamic application security testing (DAST) and manual penetration testing. The Software Security Architect role includes prioritization and remediation of software vulnerabilities and leading the secure SDLC. There is no public evidence of a Security Champions Program, nor public SLAs, MTTR targets, or ticketing workflows. Recent initiatives include the 2025 acquisition of Secure-IC, a leader in embedded security IP.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.
Interested in this role?
Apply on Cadence's site