At Cadence, we hire and develop leaders and innovators who want to make an impact on the world of technology.

Job Description

Position: IT- Staff Software Security Engineer

Grade: IT4

Location: Noida/Hyderabad

Job Description:

Role:

Cadence’s Information Security team is seeking a Sr. Software Security Engineer. This role will focus on Cloud and on-premise Software Security controls including WAF and CDN tools. This is a Security Development Operations role that will ensure security tool integration at the source code repo (Perforce, Github etc.), build environment, and artifactory level. As a member of the Information Security team, this role will develop and support the secure software develop life cycle, including DAST, SAST, SCA, penetration testing, and attack surface management.

This role reports to Group Director and will interface directly with development teams. Of course, there is broad exposure to other aspects of information security related tasks such as incident response, vulnerability management, and deployment of security solutions. The successful candidate for this position is a highly motivated individual with a strong Application Development and Configuration Management/DevOps background with hands-on experience in building software security within CI/CD.

Required Skills & Qualification

• Hands-on experience in securing corporate environment.
• Hands-on experience in security frameworks (NIST, ISO 27001, CIS) and experience with risk management and compliance
• Hands-on experience securing Windows (Workstations and Servers), Linux (Workstations and Servers), and Mac
• Hands-on experience conducting risk management by identifying gaps and providing strategies for mitigation.
• Hands-on experience documenting vulnerability assessment results in a clear and actionable format.
• Expertise in network security, firewalls, IDS/IPS, and security monitoring tools such as SIEM
• Proficiency with cloud security technologies (AWS, Azure, GCP) and securing cloud-based infrastructure.
• Experience with incident response, forensics, and managing security incidents from detection to resolution.
• Determines security violations and inefficiencies.