Jobs in the United States

25+ jobs

Group jobs by employerEmail me new jobs Save this search

Added 1 min ago
MA
Site Reliability Engineer – DevOps, Azure
Manufacturers and Traders Trust Co
Buffalo, NY
- $116,400 to $194,000 USD / year
This role is four days onsite, with the flexibility to work from home one day per week M&T Work Model - 4 Days In-Office | 1 Day Work From Home
Added 1 min ago
Systems Development Engineer , Operations Infrastructure Services
Amazon.com Services LLC
Nashville, TN
Join us in building infrastructure monitoring applications that power Amazon's global operations. You'll design and deliver services that process high-volume device telemetry, evaluate…
Added 3 mins ago
Senior Engineer, Corporate Systems & Finance Technology
Marriott
Remote, United States
The Application Solution Engineer for Oracle Enterprise Performance Management (EPM) is a subject-matter expert responsible for the design, implementation, and optimization of the full EPM…
Added 4 mins ago
Lead Director - Security Operations Center (SOC)
CVS Health
New York, NY · Juneau, AK · Montgomery, AL · Little Rock, AR · Phoenix, AZ · Sacramento, CA · Denver, CO · Hartford, CT · Washington Dc, DC · Dover, DE · Tallahassee, FL · Atlanta, GA · Honolulu, HI · Des Moines, IA · Boise, ID · Springfield, IL · Indianapolis, IN · Topeka, KS · Frankfort, KY · Baton Rouge, LA · Boston, MA · Annapolis, MD · Augusta, ME · Lansing, MI · Saint Paul, MN · Jefferson City, MO · Jackson, MS · Helena, MT · Raleigh, NC · Bismarck, ND · Lincoln, NE · Concord, NH · Trenton, NJ · Santa Fe, NM · Carson City, NV · Albany, NY · Columbus, OH · Oklahoma City, OK · Salem, OR · Harrisburg, PA · Providence, RI · Columbia, SC · Pierre, SD · Nashville, TN · Austin, TX · Salt Lake City, UT · Richmond, VA · Montpelier, VT · Olympia, WA · Madison, WI · Charleston, WV · Cheyenne, WY
As the leader of the SOC function, this role is accountable for building and maturing security operations capabilities that balance security, scalability, and business agility. The Lead…
Added 4 mins ago
SL
Sr. Linux Engineer
Soliel LLC
Fort Meade, MD
- Up to $165,000 USD / year
…providing Enterprise Architecture, Network Design, Engineering, and Operations Support, Software Design and Development, Data Center Design, Deployment and Migration, and Systems…
Added 5 mins ago
Senior Cybersecurity Engineer
Larson Network Services, LLC
St. Louis, MO
Larson Financial Holdings LLC is seeking a proven Senior Cybersecurity Engineer to build and drive cybersecurity initiatives with an ownership mindset. The Senior Cybersecurity Engineer…
Added 13 mins ago
A
Senior Software Engineer - Transport Infrastructure
Atoms
San Francisco, CA
- $180,000 to $220,000 USD / year
…control the real world with precision, turning complex physical operations into something more reliable, more scalable, and more…
Added 13 mins ago
AC
Senior IT Security and Network Engineer
AIR Communities
Denver, CO
- $130,000 to $160,000 USD / year
The role is expected to work in the office 4 to 5 days per week, based on business and team needs
Added 18 mins ago
Hybrid South Carolina Cloud Engineer – Managed IT Services (5544)
SMX
Columbia, SC · Hollywood, MD
We are looking for a skilled Cloud Engineer to join our State and Local Platforms and Data Managed Services team. As a core member of our operations group, you will work across multiple…
Added 18 mins ago
AC
Senior Software Engineer - Transport Infrastructure
ATOMS Careers page
San Francisco, CA
- $180,000 to $220,000 USD / year
…control the real world with precision, turning complex physical operations into something more reliable, more scalable, and more…
Added 19 mins ago
U
Software Engineer II (Backend) - Fulfillment Shopping
Uber
New York City, NY
- $171,000 to $190,000 USD / year
…higher order business APIs to share across products) and the Infrastructure layer (storing high write & transient data, language framework, search & ranking, events & data streaming…
Added 19 mins ago
Assistant Resident Engineer - Rail and Transit
Parsons Corporation
New York, NY
Willingness to work night shifts and adapt to non-traditional working hours
Added 19 mins ago
T
End User Computing Manager
TEKsystems
New York, NY
- $200,000 to $225,000 USD / year
…engineering, VDI, Windows endpoint services, Nutanix-aligned infrastructure, and related EUS platforms without needing to personally engineer every…
Added 19 mins ago
T
End User Computing Manager
TEKsystems
New York, NY
- $200,000 to $225,000 USD / year
…engineering, VDI, Windows endpoint services, Nutanix-aligned infrastructure, and related EUS platforms without needing to personally engineer every…
Added 21 mins ago
Senior Enterprise Security Engineer
Meredith Operations Corporation
NY · Los Angeles, CA · Des Moines, IA
People Inc is looking for a Senior Enterprise Security Engineer with a demonstrated track record of innovative thinking, technical expertise, and execution. You’ll be responsible for…
Added 24 mins ago
VC
Sr Engineer - Construction Operations & Governance
Verizon Corp Rsrcs Group LLC
Providence, RI
- $96,000 to $157,000 USD / year
Reporting to an Associate Director, the Sr Engineer Specialist drives operational efficiency, standardization, and process governance across Verizon’s global Technical Facility Engineering…
Added 28 mins ago
System Engineer
TerraPower LLC.
Everett, WA
The Systems Engineer will work across engineering disciplines, project management, Quality, Operations, and external partners to ensure assigned systems meet their intended functions and…
Added 28 mins ago
Manager, Integration & Facility Engineering
TerraPower LLC.
Everett, WA
This position will ensure facility designs support process requirements, safe operations, environmental conditions, equipment installation, maintenance, and future expansion. The manager…
Added 29 mins ago
Software Security / DevSecOps Architect
Altera Corporation
San Jose, CA
The architect partners with product, engineering, cloud, infrastructure, security operations, compliance, and leadership teams to reduce software risk without slowing innovation. The role…
Added 31 mins ago
AN
Principal DevOps Engineer
Advocus National Title Insurance Company
IL
- $160,000 to $180,000 USD / year
Advocus is hiring a Principal DevOps Engineer to set the technical direction for how we build, ship, and run software. Reporting to the CTO, you’ll own our delivery and infrastructure…
Added 31 mins ago
Contractor Liaison / Mechanical Coordinator (On-site)
Merck Sharp & Dohme LLC
NJ
…assets spanning production, utility systems and associated infrastructure. Equipment Development and Facility Engineering role within Enabling Facilities includes design, installation,…
Added 31 mins ago
Facility Engineer, MACS Senior Specialist (On-site)
Merck Sharp & Dohme LLC
NJ
…mechanical, and project management responsibility. The Facility Engineer position will report to the Associate Director, Engineering and will be a member of the Equipment Development and…
Added 32 mins ago
Forward Deployed Engineer (Real Estate)
RealPage, Inc.
Richardson, TX
…conversations in the same meeting: the technical tradeoff with their engineer, and the business outcome with their…
Added 38 mins ago
Software Development Engineer II, SDN Controller, Amazon LEO
Amazon Kuiper Manufacturing Enterprises LLC
Redmond, WA
…millions of customers worldwide. As a Software Development Engineer on the Software Defined Network controller team, you will design and build the control plane software that orchestrates a…
Added 38 mins ago
Sr Software Development Engineer, Nitro Card, Annapurna Labs, K2-US
Annapurna Labs (U.S.) Inc.
Seattle, WA · Cupertino, CA
Stay current with emerging technologies and industry trends related to Nitro Cards and AWS infrastructure.

Altera Corporation

Software Security / DevSecOps Architect

San Jose, CA, United States

$166,900 - $241,700 USD

Apply on altera.wd1.myworkdayjobs.com About employer

Applications open in a new tab.

Job details

Pay: $166,900 - $241,700 USD
Posting language: English
Posted: Nov 12, 2026

Original job description

Job Details:

Job Description:

About the Role The Software Security, and DevSecOps Architect is a senior technical lead responsible for defining and advancing the organization’s software security strategy from design through deployment and operation. This role establishes secure-by-design architecture, strengthens application and product security practices, and enables engineering teams to integrate effective security controls into modern development and delivery workflows.

The architect partners with product, engineering, cloud, infrastructure, security operations, compliance, and leadership teams to reduce software risk without slowing innovation. The role combines strategic influence with hands-on technical leadership, including security architecture reviews, threat modeling, tooling strategy, reference architectures, secure engineering standards, and risk-based remediation.

Key Responsibilities

Security Architecture and Strategy

Define and maintain the enterprise software, application, product, and DevSecOps security architecture.
Establish security principles, reference architectures, design patterns, and minimum security requirements for applications, services, APIs, platforms, devices, and products.
Translate business, customer, regulatory, and threat requirements into practical security controls and engineering standards.
Develop multi-year roadmaps for improving software security maturity, automation, developer enablement, and risk reduction.
Evaluate emerging technologies, frameworks, cloud services, AI-enabled development tools, and architectural patterns for security implications.
Serve as a trusted security advisor to engineering and product leadership.

Product and Application Security

Embed security throughout the product development lifecycle, from requirements and design to release, maintenance, and end-of-life.
Lead or guide threat modeling, attack-surface analysis, abuse-case analysis, architecture reviews, and security requirements definition.
Establish risk-based application security testing strategies covering static analysis, dynamic analysis, software composition analysis, API testing, secrets detection, container security, infrastructure-as-code scanning, and penetration testing.
Define security gates and release criteria appropriate to application criticality, data sensitivity, exposure, and business risk.
Oversee vulnerability discovery, triage, prioritization, remediation, exception handling, and verification for software security findings.
Partner with product teams to improve secure defaults, identity and access controls, cryptography, data protection, logging, resilience, and privacy safeguards.
Support security assessments for externally developed software, open-source components, third-party integrations, and acquired products.

Software Supply Chain Security

Define controls for source code, build systems, artifact repositories, package management, release processes, and deployment pipelines.
Improve software supply chain integrity through provenance, artifact signing, dependency governance, reproducible builds, access controls, and tamper detection.
Establish practices aligned to recognized frameworks and standards such as SSDF, SLSA, OWASP, NIST, and applicable regulatory requirements.
Guide the secure use, review, approval, and monitoring of open-source software and third-party components.
Develop strategies for managing dependency vulnerabilities, end-of-life technologies, malicious packages, compromised credentials, and build-environment threats.

DevSecOps Enablement

Design and implement scalable security capabilities within CI/CD and developer workflows.
Integrate security tools into source control, pull requests, build pipelines, registries, deployment platforms, and production feedback loops.
Establish developer-friendly security patterns, guardrails, self-service workflows, and actionable feedback mechanisms.
Reduce false positives and security friction through policy tuning, automation, risk-based prioritization, and clear remediation guidance.
Define security-as-code approaches for infrastructure, cloud configurations, policies, pipeline controls, and compliance evidence.
Build reusable templates, libraries, controls, and platform capabilities that make the secure path the easiest path.

Governance, Risk, and Assurance

Maintain software security policies, standards, procedures, and exception processes.
Provide technical input to enterprise risk assessments, customer security reviews, audits, regulatory inquiries, and product assurance activities.
Define measurable security objectives, key risk indicators, and program health metrics.
Prepare clear risk narratives and recommendations for technical and executive audiences.
Partner with incident response and security operations teams to investigate and contain software-related security incidents.
Ensure security architecture decisions and risk acceptances are documented, traceable, and periodically reviewed.

Leadership and Collaboration

Mentor security engineers, application security specialists, architects, developers, and DevOps engineers.
Establish communities of practice and champion secure engineering across the organization.
Facilitate architecture and design reviews with multiple stakeholders and competing priorities.
Influence without direct authority and communicate complex security topics in clear, business-oriented language.
Represent software security in architecture councils, engineering planning, product reviews, and strategic technology initiatives.

Core Competencies

Secure-by-design architecture
Product and application security
Threat modeling and attack-surface management
Software supply chain security
Cloud and container security
CI/CD and DevSecOps engineering
Security automation and policy-as-code
Vulnerability and risk management
Secure coding and developer enablement
Technical leadership and influence
Strategic planning and execution
Executive communication and decision support

Success Measures

Success in this role may be measured by:

Increased adoption of secure architecture patterns and threat modeling across critical products and services.
Improved coverage, quality, and risk-based effectiveness of application security testing.
Reduced time to identify, prioritize, remediate, and verify software vulnerabilities.
Increased security automation and reduced manual effort in development and delivery workflows.
Improved software supply chain integrity, dependency governance, and build-environment security.
Higher developer engagement with security guidance, training, tooling, and self-service capabilities.
Reduced recurrence of security defects and improved security outcomes for products and applications.
Strong audit, customer assurance, and regulatory outcomes supported by reliable evidence and traceability.

Working Relationships

This role works closely with:

· Product management and product engineering · Software development and platform engineering · Cloud, infrastructure, and DevOps teams · Security operations, incident response, and vulnerability management · Enterprise architecture and technology governance · Privacy, legal, compliance, and internal audit · Customer assurance and technical account teams · Executive and business leadership

Salary Range The pay range below is for Bay Area California only. Actual salary may vary based on a number of factors including job location, job-related knowledge, skills, experiences, trainings, etc. We also offer incentive opportunities that reward employees based on individual and company performance.

$166,900 - $241,700 USD

We use artificial intelligence to screen, assess, or select applicants for the position. Applicants must be eligible for any required U.S. export authorizations.

Qualifications:

Minimum Qualifications

Bachelor’s degree in computer science, cybersecurity, software engineering, information systems, or a related field; equivalent practical experience may be considered.
10 or more years of experience in cybersecurity, software engineering, application security, product security, cloud security, DevOps, or a related discipline.
5 or more years of experience designing or leading software security, application security, product security, or DevSecOps programs.
Demonstrated experience designing secure architectures for distributed applications, APIs, cloud services, microservices, platforms, or embedded and connected products.
Strong understanding of software development and delivery practices, including source control, branching, code review, build systems, CI/CD, artifact management, deployment, and observability.
Practical experience with threat modeling, secure design reviews, vulnerability management, security testing, and remediation programs.
Strong understanding of identity and access management, authentication, authorization, secrets management, cryptography, data protection, logging, and secure communications.
Experience with at least one major cloud platform and modern container or orchestration technologies.
Ability to read and review code in one or more languages such as Java, Python, Go, JavaScript/TypeScript, C#, C/C++, or similar.
Experience evaluating, integrating, governing, and operating application or cloud security tools.

Preferred Qualifications

Master’s degree in cybersecurity, computer science, or a related field.
Professional certifications such as CISSP, CSSLP, SABSA, CCSP, OSCP, GIAC, AWS Security Specialty, Azure Security Engineer, or equivalent.
Experience with product security for hardware, firmware, IoT, industrial, automotive, medical, or other connected systems.
Experience implementing software supply chain security, SBOM programs, artifact signing, provenance, or SLSA-aligned controls.
Experience with policy-as-code, infrastructure-as-code, cloud-native security, Kubernetes security, or platform engineering.
Experience with security standards and frameworks including NIST CSF, NIST SSDF, OWASP ASVS, OWASP SAMM, OWASP Top 10, CIS Controls, ISO 27001, SOC 2, PCI DSS, IEC 62443, or relevant industry requirements.
Experience building security developer education, champions, enablement, or secure coding programs.
Experience supporting incident response involving compromised applications, packages, pipelines, credentials, or production services.
Experience incorporating privacy, resilience, and responsible AI considerations into software architecture.

Job Type:

Regular

Shift:

Shift 1 (United States of America)

Primary Location:

San Jose, California, United States

Additional Locations:

Posting Statement:

All qualified applicants will receive consideration for employment without regard to race, color, religion, religious creed, sex, national origin, ancestry, age, physical or mental disability, medical condition, genetic information, military and veteran status, marital status, pregnancy, gender, gender expression, gender identity, sexual orientation, or any other characteristic protected by local law, regulation, or ordinance.

Apply on altera.wd1.myworkdayjobs.com About employer

More about this job

Skills

Architectural design
Regulatory compliance
Leadership
Security regulations
Infrastructure as code
Penetration testing
Prioritization
Supply chain management
CI/CD
Incident response
Collaboration
Risk management
Strategic planning
Communication skills
Software development
Computer science
Cybersecurity
DevOps
Microservices
Identity and access management
Data protection
Oracle Java
Python
Go
JavaScript
TypeScript
C#
C
C++
CISSP
AWS
Microsoft Azure
Firmware
Kubernetes

Report this job

Work requirements

Jobs in the United States