Director of Software Security - San Jose, United States
$164,500 - $305,500 USD yearly
Originally posted 29 July 2026 by the employer.
About the role
Cadence InfoSec is seeking a Director of Software Security to lead the strategy, architecture, and execution of secure software development practices across the enterprise. This role drives DevSecOps transformation, ensures compliance with regulatory frameworks including CMMC, and embeds security throughout the software development lifecycle.
What you'll do
- Define and execute enterprise DevSecOps strategy, integrating security controls into CI/CD pipelines and driving adoption of SAST, DAST, and SCA tools. - Establish reference architectures, threat modeling initiatives, secure API designs, and zero trust principles for microservices, containers, Kubernetes, and serverless applications. - Lead regulatory compliance initiatives for CMMC 2.0, NIST SP 800-171r2/800-53, and ISO 27001, implementing controls for Controlled Unclassified Information (CUI). - Secure DevOps pipelines and infrastructure-as-code across AWS, Microsoft Azure, Google Cloud, and IBM Cloud. - Build and scale an application security program across product lines, covering vulnerability management lifecycles, bug bounty programs, and software supply chain security (SBOM, artifact signing). - Lead teams of AppSec engineers, DevSecOps engineers, and architects while reporting security posture to executive leadership and the board.
What you'll need
- 12–15+ years in cybersecurity, with a strong focus on application security and DevSecOps. - 5+ years in leadership at the manager or director level. - Deep expertise in secure SDLC, DevSecOps pipelines, cloud-native architectures, container security, and regulatory frameworks (CMMC, NIST, ISO). - Experience in regulated industries such as defense, government, healthcare, or fintech.
Nice to have
- Hands-on experience with tools including Checkmarx, Veracode, Burp Suite, Snyk, Black Duck, Jenkins, and GitHub Actions. - Familiarity with Kubernetes, Docker, and service mesh security. - Certifications such as CISSP, CSSLP, CISM, or CCSP. - Experience with Zero Trust and identity-first security.
Skills: DevSecOps, application security, secure software architecture, CMMC, supply chain security
This role has been open 150 days — well above the 62-day median for Hardware Security Engineering roles.
Hardware Security Engineering · Hardware Security
|
Open roles in category
180
|
Median days open
62 d
|
Median salary
$224k
|
See the full market breakdown ▾Category comparison, skills in demand, and who else is hiring
| Metric | Cadence Design Systems | All employers we track in this specialty (180 roles · 42 employers) |
|---|---|---|
| Open roles in this specialty | 3 | 180 |
| Median days open | 150 d | 62 d (+88 d vs this employer) |
| Median salary (USD postings) | — | $224k |
Skills observed across this category: DevSecOps, application security, secure software architecture, CMMC, supply chain security
Who's hiring in this category
- NVIDIA · 31 open roles · median 38 d
- NXP Semiconductors · 23 open roles · median 93 d
- Qualcomm · 17 open roles · median 128 d
- Arm Holdings · 13 open roles · median 108 d
- STMicroelectronics · 9 open roles · median 26 d
- AMD · 8 open roles · median 64 d
How we counted: 180 open Hardware Security Engineering (Hardware Security) roles from 42 employers tracked in the SemiconductorJobs index, counted 24 Oct 2026. Specialty figures count only roles carrying this exact specialty label, so an employer's related work in neighbouring specialties is not included there. Figures refresh nightly.