IT- Staff Software Security Engineer
Cadence · Noida, India +1 · 1y ago
At Cadence, we hire and develop leaders and innovators who want to make an impact on the world of technology.
Job Description
Position: IT- Staff Software Security Engineer
Grade: IT4
Location: Noida/Hyderabad
Job Description:
Role:
Cadence’s Information Security team is seeking a Sr. Software Security Engineer. This role will focus on Cloud and on-premise Software Security controls including WAF and CDN tools. This is a Security Development Operations role that will ensure security tool integration at the source code repo (Perforce, Github etc.), build environment, and artifactory level. As a member of the Information Security team, this role will develop and support the secure software develop life cycle, including DAST, SAST, SCA, penetration testing, and attack surface management.
This role reports to Group Director and will interface directly with development teams. Of course, there is broad exposure to other aspects of information security related tasks such as incident response, vulnerability management, and deployment of security solutions. The successful candidate for this position is a highly motivated individual with a strong Application Development and Configuration Management/DevOps background with hands-on experience in building software security within CI/CD.
Required Skills & Qualification
Hands-on experience in securing corporate environment.
Hands-on experience in security frameworks (NIST, ISO 27001, CIS) and experience with risk management and compliance
Hands-on experience securing Windows (Workstations and Servers), Linux (Workstations and Servers), and Mac
Hands-on experience conducting risk management by identifying gaps and providing strategies for mitigation.
Hands-on experience documenting vulnerability assessment results in a clear and actionable format.
Expertise in network security, firewalls, IDS/IPS, and security monitoring tools such as SIEM
Proficiency with cloud security technologies (AWS, Azure, GCP) and securing cloud-based infrastructure.
Experience with incident response, forensics, and managing security incidents from detection to resolution.
Determines security violations and inefficiencies.
Knowledge of mergers and acquisitions
Experience:
• Should have relevant experience of at least 10-15 years.
Qualification:
• Engineering (Computers, Electronics, IT) or equivalent