Autodesk Security Team

Security at Autodesk

Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.

3 Intel Signals

How they approach application security

Autodesk's AppSec philosophy is centered on a 'shift-left' approach, aiming to embed security directly into the software development lifecycle (SDLC).
Their mission focuses on developer enablement rather than strict gatekeeping, emphasizing the need to provide developers with the tools and guidance to identify and remediate vulnerabilities early in their own environments.
Core practices include continuous vulnerability assessment and risk mitigation.

The team

Autodesk's security organization is led by Reeny Sondhi, Chief Security Officer.
The Application Security team includes specialized roles such as Principal Application Security Engineers and Application Security Engineers.
While the exact reporting line (e.g., to CISO or CTO) is not explicitly stated in verbatim text, the team is centralized within the security function and actively recruits for roles focused on embedding security into the SDLC.
A search of public professional profiles identified at least 6 individuals currently in AppSec-specific roles.

What they're working on

Active initiatives include the implementation of 'shift-left' security practices and the optimization of SAST tooling for developer use.
Autodesk maintains a robust vulnerability management process that includes a public security advisory page and a vulnerability disclosure program.
They also perform threat modeling and penetration testing as part of their secure SDLC.
No evidence of a formal 'Security Champions' program was found in public records.