Director Of Software Security
ΠΡΡΡ & Π‘ΠΎΠΏΡΠΎΠ²ΠΎΠ΄
ΠΠ»Ρ ΠΌΡΡΡΠ° Ρ ΡΡΠΎΠΉ Π²Π°ΠΊΠ°Π½ΡΠΈΠ΅ΠΉ Π½ΡΠΆΠ΅Π½ Plus
ΠΠΏΠΈΡΠ°Π½ΠΈΠ΅ Π²Π°ΠΊΠ°Π½ΡΠΈΠΈ
TL;DR
Director of Software Security (Cybersecurity): Leading the strategy, architecture, and execution of secure software development practices across the enterprise with an accent on DevSecOps transformation and regulatory compliance. Focus on embedding security throughout the SDLC, securing cloud-native architectures, and ensuring adherence to CMMC and NIST frameworks.
Location: Must be based in San Jose, California
Salary: $164,500β$305,500
Company
is a leader in electronic design and computational software, hiring innovators to solve complex technological challenges.
What you will do
- Define and execute enterprise-wide DevSecOps strategy and secure coding practices.
- Lead compliance initiatives for CMMC 2.0, NIST, and ISO 27001 frameworks.
- Secure CI/CD pipelines and cloud-native architectures across AWS, Azure, and GCP.
- Build and scale the Application Security program, including vulnerability management and bug bounty programs.
- Manage software supply chain integrity through SBOM and dependency scanning.
- Lead and mentor teams of AppSec and DevSecOps engineers while influencing engineering culture.
Requirements
- 12β15+ years of experience in cybersecurity with a focus on AppSec and DevSecOps.
- 5+ years of leadership experience at the manager or director level.
- Deep expertise in secure SDLC, cloud-native security, and container orchestration.
- Proven experience with regulatory frameworks such as CMMC, NIST, and ISO.
- Experience working in regulated industries like defense, government, or fintech.
- Must be authorized to work in the United States.
Nice to have
- Hands-on experience with SAST/DAST/SCA tools like Checkmarx, Burp Suite, or Snyk.
- Certifications such as CISSP, CSSLP, CISM, or CCSP.
- Familiarity with Zero Trust architecture and identity-first security.
Culture & Benefits
- Comprehensive medical, dental, and vision insurance plans.
- 401(k) retirement plan with employer match.
- Employee stock purchase plan.
- Paid vacation and holidays.
- Opportunity to work on high-impact, mission-critical technology.
ΠΡΠ΄ΡΡΠ΅ ΠΎΡΡΠΎΡΠΎΠΆΠ½Ρ: Π΅ΡΠ»ΠΈ ΡΠ°Π±ΠΎΡΠΎΠ΄Π°ΡΠ΅Π»Ρ ΠΏΡΠΎΡΠΈΡ Π²ΠΎΠΉΡΠΈ Π² ΠΈΡ ΡΠΈΡΡΠ΅ΠΌΡ, ΠΈΡΠΏΠΎΠ»ΡΠ·ΡΡ iCloud/Google, ΠΏΡΠΈΡΠ»Π°ΡΡ ΠΊΠΎΠ΄/ΠΏΠ°ΡΠΎΠ»Ρ, Π·Π°ΠΏΡΡΡΠΈΡΡ ΠΊΠΎΠ΄/ΠΠ, Π½Π΅ Π΄Π΅Π»Π°ΠΉΡΠ΅ ΡΡΠΎΠ³ΠΎ - ΡΡΠΎ ΠΌΠΎΡΠ΅Π½Π½ΠΈΠΊΠΈ. ΠΠ±ΡΠ·Π°ΡΠ΅Π»ΡΠ½ΠΎ ΠΆΠΌΠΈΡΠ΅ "ΠΠΎΠΆΠ°Π»ΠΎΠ²Π°ΡΡΡΡ" ΠΈΠ»ΠΈ ΠΏΠΈΡΠΈΡΠ΅ Π² ΠΏΠΎΠ΄Π΄Π΅ΡΠΆΠΊΡ. ΠΠΎΠ΄ΡΠΎΠ±Π½Π΅Π΅ Π² Π³Π°ΠΉΠ΄Π΅ β