At a Glance
Cadence InfoSec seeking a Security Architect with deep expertise in Artificial Intelligence (AI) and Machine Learning (ML) security to design, implement, and govern secure AI systems across the enterprise. This role will focus on protecting AI/ML models, data pipelines, and GenAI applications from emerging threats while enabling safe innovation.
Key Responsibilities
AI/ML Security Architecture
Design secure architectures for AI/ML systems, including model training, inference, and deployment pipelines
Define security controls for LLMs (Large Language Models), GenAI platforms, and AI APIs
Embed security into MLOps pipelines (DevSecOps for AI)
Threat Modeling & Risk Management
Conduct threat modeling for AI systems (e.g., prompt injection, model poisoning, data leakage)
Develop risk frameworks aligned with NIST AI Risk Management Framework
Identify and mitigate adversarial AI threats and abuse cases
Data Security & Privacy
Ensure protection of training and inference data (PII, PHI, proprietary data)
Implement data governance, anonymization, and encryption strategies
Ensure compliance with regulations (GDPR, HIPAA, etc.)
Cloud & Platform Security
Secure AI workloads across cloud platforms such as
Amazon Web Service
Microsoft Azure
Google Cloud
IBM Cloud
Architect secure integrations with AI services and APIs
Model Security & Integrity
Protect against model theft, inversion, and extraction attacks
Implement model monitoring for drift, anomalies, and abuse
Ensure secure model storage, versioning, and access control
Governance & Compliance
Establish AI security policies, standards, and guardrails
Align with industry AI frameworks such as
ISO AI standards (e.g., ISO/IEC 42001)
Support audit, regulatory, and CIO and CISO reporting
Collaboration & Leadership
Partner with data scientists, ML engineers, and product teams
Provide security guidance for AI product development
Lead security reviews and architecture boards
Mentor security engineers on AI-specific threats
Required Qualifications
Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or related field
8+ years in cybersecurity architecture or engineering
Experience securing AI/ML systems or data platforms
Strong understanding of:
Cloud security (IAM, network, containers, serverless)
API security and microservices
Encryption, key management, and identity systems
Development of Agent and Agentic AI for security use cases
Experience with MCP
Preferred Qualifications
Experience with LLMs (e.g., prompt engineering, RAG architectures)
Familiarity with adversarial ML techniques
Knowledge of tools like:
MLflow, Kubeflow, SageMaker
SIEM/XDR platforms
Certifications:
CISSP, CCSP, or cloud security certifications
Experience in semiconductor industry is a plus
Key Skills
AI Threat Modeling (Prompt Injection, Data Poisoning, Model Evasion)
Secure MLOps / DevSecOps
Zero Trust Architecture
Data Privacy & Governance
Cloud-Native Security
Risk & Compliance Management
The annual salary range for California is $164,500 to $305,500. You may also be eligible to receive incentive compensation: bonus, equity, and benefits. Sales positions generally offer a competitive On Target Earnings (OTE) incentive compensation structure. Please note that the salary range is a guideline and compensation may vary based on factors such as qualifications, skill level, competencies and work location. Our benefits programs include: paid vacation and paid holidays, 401(k) plan with employer match, employee stock purchase plan, a variety of medical, dental and vision plan options, and more.
Source: Cadence careers · View original posting
Cadence Design Systems, Inc. is a multinational technology company that specializes in electronic design automation (EDA) software, hardware, and services. The company provides computational software and engineering solutions that facilitate the design and development of electronic systems, including chips and complete systems-on-chips. Their tools are utilized in various applications such as AI, 5G, automotive, hyperscale computing, and aerospace. Cadence offers a range of EDA software for designing, verifying, and optimizing electronic systems. Their hardware platforms, including emulation and prototyping systems, support faster design validation. Additionally, the company provides engineering and methodology services to assist customers in effectively implementing EDA tools, along with intellectual property cores for reusable design blocks.
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
Security Team
Cadence's Information Security team is principally responsible for identifying security matters, and the Audit Committee receives semi-annual reports on cybersecurity. Tarak Ray serves as Senior Vice President and Chief Information Officer since 2022. No public, named AppSec manager or CISO-specific profile was found. The team size estimate is not publicly available. As of, there was one active AppSec job posting for a Software Security Architect (Job ID: R50300). Common skill and tool patterns from this posting include architecting and leading secure SDLC, DAST, SAST, SCA, penetration testing, attack surface management, building artifactory using JFrog or SonaType, and familiarity with Blackduck, Fortify, and SonarQube. No public org chart or reporting line explicitly states whether AppSec is centralized or embedded.
Key Initiatives
Cadence practices 'shift-left security' within the SDLC, integrating security tools at the source code repository, build, and artifact levels, and incorporating static application security testing (SAST) into scheduled and ad-hoc builds. For vulnerability management, open-source software (OSS) security is enforced through vetted components, and released products undergo dynamic application security testing (DAST) and manual penetration testing. The Software Security Architect role includes prioritization and remediation of software vulnerabilities and leading the secure SDLC. There is no public evidence of a Security Champions Program, nor public SLAs, MTTR targets, or ticketing workflows. Recent initiatives include the 2025 acquisition of Secure-IC, a leader in embedded security IP.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.
Interested in this role?
Apply on Cadence's site