[Skip to main content](#main-content) [OpenNash Jobs](https://jobs.opennash.com/) [Hiring report](/reports/hiring/) · [All Cadence Design jobs](https://jobs.opennash.com/companies/cadence-design/) · [Search jobs](/search/) Cadence Design · San Jose # Director of Software Security San Jose Director $164,500 to $305,500 Software Engineering Listed on Cadence Design’s official careers site. Posted October 8, 2026. Check that it is still open and apply there. [Apply on Cadence Design’s careers site →](https://cadence.wd1.myworkdayjobs.com/External_Careers/job/SAN-JOSE/Director-of-Software-Security_R54237) [OpenNash Jobs](https://jobs.opennash.com/) / [Cadence Design](https://jobs.opennash.com/companies/cadence-design/) / Director of Software Security ## Job description At Cadence, we hire and develop leaders and innovators who want to make an impact on the world of technology. Cadence InfoSec is seeking a Director of Software Security to lead the strategy, architecture, and execution of secure software development practices across the enterprise. This role will drive DevSecOps transformation, ensure compliance with regulatory frameworks (including CMMC), and embed security throughout the software lifecycle (SDLC). ### Key Responsibilities DevSecOps Strategy & Leadership - Define and execute enterprise DevSecOps strategy across all development teams - Integrate security controls into CI/CD pipelines (build, test, release) Establish “shift-left” security practices across the SDLC Drive adoption of secure coding, SAST, DAST, and SCA tools ### Secure Software Architecture - Define reference architectures for secure microservices, APIs, and cloud-native apps - Establish security patterns for containers, Kubernetes, and serverless - Lead threat modeling initiatives - Ensure secure API design and zero trust principles Regulatory Compliance & CMMC Lead compliance initiatives for: Cybersecurity Maturity Model Certification (CMMC 2.0) NIST SP 800-171r2 /800-53 ISO 27001 - Ensure software systems meet federal, defense, and privacy regulations - Coordinate audits, assessments, and continuous monitoring programs - Implement controls for handling Controlled Unclassified Information (CUI) Cloud & Platform Security Secure DevOps pipelines across cloud platforms: Amazon AWS Microsoft Azure Google Cloud IBMC cloud Cadence software service and products - Implement infrastructure-as-code (IaC) security scanning - Define secrets management, identity, and access controls ### Application Security Program - Build and scale AppSec program across all product lines - Define vulnerability management lifecycle (discovery → remediation → validation) - Establish bug bounty / responsible disclosure programs - Integrate security into Agile and CI/CD workflows Supply Chain & Software Integrity Secure software supply chain (SBOM, dependency scanning) - Implement artifact signing, provenance, and integrity validation ### Governance & Risk Management - Define policies, standards, and secure development guidelines Establish KPIs: vulnerability remediation SLA, code coverage, pipeline security Align software security with enterprise risk management - Report posture to executive leadership and board ### Leadership & Cross-Functional Influence - Lead teams of AppSec engineers, DevSecOps engineers, and architects - Partner with Engineering, Product, Legal, and Compliance teams - Build security champions program within development teams - Influence engineering culture toward security ownership ### Required Qualifications 12–15+ years in cybersecurity, with strong focus on application security and DevSecOps 5+ years in leadership (manager/director level) Deep expertise in: Secure SDLC and DevSecOps pipelines Cloud-native architectures and container security Regulatory frameworks (CMMC, NIST, ISO) Experience in regulated industries (defense, government, healthcare, fintech) ### Preferred Qualifications Hands-on experience with tools such as: SAST: Checkmarx, Veracode DAST: Burp Suite SCA: Snyk, Black Duck CI/CD: Jenkins, GitHub Actions Familiarity with Kubernetes, Docker, and service mesh security Certifications: CISSP, CSSLP CISM or CCSP Experience with Zero Trust and identity-first security ### Key Skills DevSecOps Transformation Secure Software Architecture Regulatory Compliance (CMMC, NIST, ISO) Application Security & Threat Modeling Software Supply Chain Security (SBOM, SLSA) Cloud & Container Security Executive Communication & Strategy The annual salary range for California is $164,500 to $305,500. You may also be eligible to receive incentive compensation: bonus, equity, and benefits. Sales positions generally offer a competitive On Target Earnings (OTE) incentive compensation structure. Please note that the salary range is a guideline and compensation may vary based on factors such as qualifications, skill level, competencies and work location. Our benefits programs include: paid vacation and paid holidays, 401(k) plan with employer match, employee stock purchase plan, a variety of medical, dental and vision plan options, and more. We’re doing work that matters. Help us solve what others can’t. ## At a glance - Posted by the employer: Oct 8, 2026 - First seen by OpenNash: Jul 10, 2026 - Last checked: Oct 18, 2026 - Listed for: 100 days - Location: San Jose - Pay: $164,500 to $305,500[Apply on Cadence Design’s careers site →](https://cadence.wd1.myworkdayjobs.com/External_Careers/job/SAN-JOSE/Director-of-Software-Security_R54237) ## More jobs at Cadence Design ### [Full-Stack Software Engineer - IDE, Web APIs, Infrastructure](https://jobs.opennash.com/companies/cadence-design/jobs/e6da2371a5b2257fd29b/) San Jose ### [Lead Software Engineer](https://jobs.opennash.com/companies/cadence-design/jobs/db1c8875d63e33953453/) San Jose ### [Lead Software Engineer - Low Power Verification](https://jobs.opennash.com/companies/cadence-design/jobs/4d5e437dbac1e54a71ea/) San Jose ## Similar jobs at other companies ### [Director of Security Engineering](https://jobs.opennash.com/companies/jpmorganchase/jobs/6a1392077810b9a5d5d3/) JPMorganChase · Dublin, Ireland ### [Activation GTM Director-Security](https://jobs.opennash.com/companies/microsoft/jobs/80c488b68d08fe8a8c6f/) Microsoft · Singapore ### [Sr. Director, Cyber Defense and Security Operations](https://jobs.opennash.com/companies/sandisk/jobs/f084702603414f392fde/) Sandisk ### [Senior Software Developer - Automotive Security](https://jobs.opennash.com/companies/ntt/jobs/d8f83f38f29cc1b25f2d/) NTT · Timisoara, Romania ### [Mobile Software Security Evaluator](https://jobs.opennash.com/companies/sgs/jobs/215244fa1be044a768eb/) SGS · Delft, ZH, Netherlands OpenNash lists jobs from employers’ own careers sites and does not handle applications. Dates come from the employer where stated; “first seen” and “last checked” are our own observations. OpenNash Jobs · Official listings with dates and links to the employer. [Weekly hiring report](/reports/hiring/) · [Methodology](/methodology/)