Cadence
At a Glance
Job Description
Position: IT- Staff Software Security Engineer
Grade: IT4
Location: Noida/Hyderabad
Job Description:
Role:
Cadence’s Information Security team is seeking a Sr. Software Security Engineer. This role will focus on Cloud and on-premise Software Security controls including WAF and CDN tools. This is a Security Development Operations role that will ensure security tool integration at the source code repo (Perforce, Github etc.), build environment, and artifactory level. As a member of the Information Security team, this role will develop and support the secure software develop life cycle, including DAST, SAST, SCA, penetration testing, and attack surface management.
This role reports to Group Director and will interface directly with development teams. Of course, there is broad exposure to other aspects of information security related tasks such as incident response, vulnerability management, and deployment of security solutions. The successful candidate for this position is a highly motivated individual with a strong Application Development and Configuration Management/DevOps background with hands-on experience in building software security within CI/CD.
Required Skills & Qualification
Hands-on experience in securing corporate environment.
Hands-on experience in security frameworks (NIST, ISO 27001, CIS) and experience with risk management and compliance
Hands-on experience securing Windows (Workstations and Servers), Linux (Workstations and Servers), and Mac
Hands-on experience conducting risk management by identifying gaps and providing strategies for mitigation.
Hands-on experience documenting vulnerability assessment results in a clear and actionable format.
Expertise in network security, firewalls, IDS/IPS, and security monitoring tools such as SIEM
Proficiency with cloud security technologies (AWS, Azure, GCP) and securing cloud-based infrastructure.
Experience with incident response, forensics, and managing security incidents from detection to resolution.
Determines security violations and inefficiencies.
Knowledge of mergers and acquisitions
Experience:
• Should have relevant experience of at least 10-15 years.
Qualification:
• Engineering (Computers, Electronics, IT) or equivalent
Source: Cadence careers · View original posting
Cadence Design Systems, Inc. is a multinational technology company that specializes in electronic design automation (EDA) software, hardware, and services. The company provides computational software and engineering solutions that facilitate the design and development of electronic systems, including chips and complete systems-on-chips. Their tools are utilized in various applications such as AI, 5G, automotive, hyperscale computing, and aerospace. Cadence offers a range of EDA software for designing, verifying, and optimizing electronic systems. Their hardware platforms, including emulation and prototyping systems, support faster design validation. Additionally, the company provides engineering and methodology services to assist customers in effectively implementing EDA tools, along with intellectual property cores for reusable design blocks.
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
Security Team
Cadence's Information Security team is principally responsible for identifying security matters, and the Audit Committee receives semi-annual reports on cybersecurity. Tarak Ray serves as Senior Vice President and Chief Information Officer since 2022. No public, named AppSec manager or CISO-specific profile was found. The team size estimate is not publicly available. As of, there was one active AppSec job posting for a Software Security Architect (Job ID: R50300). Common skill and tool patterns from this posting include architecting and leading secure SDLC, DAST, SAST, SCA, penetration testing, attack surface management, building artifactory using JFrog or SonaType, and familiarity with Blackduck, Fortify, and SonarQube. No public org chart or reporting line explicitly states whether AppSec is centralized or embedded.
Key Initiatives
Cadence practices 'shift-left security' within the SDLC, integrating security tools at the source code repository, build, and artifact levels, and incorporating static application security testing (SAST) into scheduled and ad-hoc builds. For vulnerability management, open-source software (OSS) security is enforced through vetted components, and released products undergo dynamic application security testing (DAST) and manual penetration testing. The Software Security Architect role includes prioritization and remediation of software vulnerabilities and leading the secure SDLC. There is no public evidence of a Security Champions Program, nor public SLAs, MTTR targets, or ticketing workflows. Recent initiatives include the 2025 acquisition of Secure-IC, a leader in embedded security IP.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.
Interested in this role?
Apply on Cadence's site