Full job description

At Cadence, we hire and develop leaders and innovators who want to make an impact on the world of technology.

Cadence InfoSec is seeking a Director of Software Security to lead the strategy, architecture, and execution of secure software development practices across the enterprise. This role will drive DevSecOps transformation, ensure compliance with regulatory frameworks (including CMMC), and embed security throughout the software lifecycle (SDLC).

Key Responsibilities

DevSecOps Strategy & Leadership

Define and execute enterprise DevSecOps strategy across all development teams
Integrate security controls into CI/CD pipelines (build, test, release)
Establish “shift-left” security practices across the SDLC
Drive adoption of secure coding, SAST, DAST, and SCA tools

Secure Software Architecture

Define reference architectures for secure microservices, APIs, and cloud-native apps
Establish security patterns for containers, Kubernetes, and serverless
Lead threat modeling initiatives
Ensure secure API design and zero trust principles

Regulatory Compliance & CMMC

Lead compliance initiatives for:
Cybersecurity Maturity Model Certification (CMMC 2.0)
NIST SP 800-171r2 /800-53
ISO 27001
Ensure software systems meet federal, defense, and privacy regulations
Coordinate audits, assessments, and continuous monitoring programs
Implement controls for handling Controlled Unclassified Information (CUI)

Cloud & Platform Security

Secure DevOps pipelines across cloud platforms:
Amazon AWS
Microsoft Azure
Google Cloud
IBMC cloud
Cadence software service and products
Implement infrastructure-as-code (IaC) security scanning
Define secrets management, identity, and access controls

Application Security Program

Build and scale AppSec program across all product lines

At Cadence, we hire and develop leaders and innovators who want to make an impact on the world of technology.

We’re doing work that matters. Help us solve what others can’t.