12-15+ years in cybersecurity, with strong focus on application security and DevSecOps
5+ years in leadership (manager/director level)
Deep expertise in:
Secure SDLC and DevSecOps pipelines
Cloud-native architectures and container security
Regulatory frameworks (CMMC, NIST, ISO)
Experience in regulated industries (defense, government, healthcare, fintech)
Requirements
Hands-on experience with tools such as:
SAST: Checkmarx, Veracode
DAST: Burp Suite
SCA: Snyk, Black Duck
CI/CD: Jenkins, GitHub Actions
Familiarity with Kubernetes, Docker, and service mesh security
Certifications:
CISSP, CSSLP
CISM or CCSP
Experience with Zero Trust and identity-first security
Key Skills
DevSecOps Transformation
Secure Software Architecture
Regulatory Compliance (CMMC, NIST, ISO)
Application Security & Threat Modeling
Software Supply Chain Security (SBOM, SLSA)
Cloud & Container Security
Executive Communication & Strategy
We're doing work that matters. Help us solve what others can't.
Benefits
Health insuranceDental insuranceVision insurance401(k)Paid time offEquity / stock optionsPerformance bonus
Additional Information
At Cadence, we hire and develop leaders and innovators who want to make an impact on the world of technology.
Cadence InfoSec is seeking a Director of Software Security to lead the strategy, architecture, and execution of secure software development practices across the enterprise. This role will drive DevSecOps transformation, ensure compliance with regulatory frameworks (including CMMC), and embed security throughout the software lifecycle (SDLC).
Cadence · San Jose