Software Security Architect (Cybersecurity)

TL;DR

Software Security Architect (Cybersecurity): Designing and implementing a secure software development lifecycle (SDLC) for development teams with an accent on security-by-design and tool integration. Focus on automating SAST, DAST, and SCA within CI/CD pipelines and managing the software attack surface.

Location: Onsite in San Jose, CA

Salary: $136,500 – $253,500

Company

hirify.global is a leading provider of electronic design automation (EDA) and intellectual property software.

What you will do

• Integrate security practices and solutions directly into the SDLC.
• Implement software composition analysis (SCA) within CI/CD pipelines.
• Architect and manage company artifactory using JFrog or Sonatype.
• Integrate security tools with DevOps platforms such as Jenkins, GitHub Actions, and CircleCI.
• Prioritize and lead the remediation of discovered software vulnerabilities.

Requirements

• Must be based in San Jose, CA (onsite position).
• Minimum 8 years of experience in software development or information security.
• Proficiency in C/C++, Python, and TcL.
• Hands-on experience with GitHub, Perforce, Sonatype, and JFrog.
• Experience with security tools such as Blackduck, Fortify, and SonarQube.
• Bachelor's degree in Computer Science, Information Security, or a related field.

Nice to have

• Certified Secure Software Lifecycle Professional (CSSLP) certification.
• Certified Information Systems Security Professional (CISSP) certification.
• Certified Cloud Security Professional (CCSP) certification.

Culture & Benefits

• 401(k) plan with employer match.
• Employee stock purchase plan.
• Comprehensive medical, dental, and vision insurance options.
• Paid vacation and paid holidays.