Job Requisition ID #
26WD99882
Position Overview
Autodesk is looking for an experienced, enthusiastic Product Security Engineer who will be an important partner and in creating and delivering trusted solutions for the Fusion Platform organization. As a Product Security Engineer, you will be involved in efforts to support and influence engineering teams, you will also lead cross-team security programs, represent the Trust organization, support the SOC2 and FedRAMP audit processes, and provide technical-security focused leadership for all Fusion.
In accordance with U.S. government contracting and FedRAMP compliance obligations, this role requires U.S. citizenship or U.S. lawful permanent residency. Employment is contingent upon meeting all applicable government security and eligibility requirements.
Responsibilities
* Coordinate regular security testing (vulnerability assessments, penetration testing, application security)
* Perform product security reviews, threat model, secure coding practices, application, and infrastructure security review
* Perform continuous risk assessment, propose, and track remediation actions
* Review all access to critical systems and data
* Closely work with Security team, engineering, and product teams to implement and maintain corporate security objectives, and to drive the
* implementation of security & privacy requirements
* Support efforts for monitoring, detecting, responding, and investigating security incidents
* Coordinate business continuity, disaster recovery testing
* Contribute to security awareness, as well as periodic security updates and reminder communications for all team members
* Implement and maintain security and privacy strategy and requirements, aligned with the company objectives
Minimum Qualifications
* Bachelor’s degree in computer science, Information Technology and Engineering or related field (or equivalent experience)
* 5+ years of information security, cybersecurity, or privacy experience
* Exceptional knowledge and experience in security assessments and testing, vulnerability assessment, secure software development and application security, penetration testing
* Demonstrated knowledge of information security risks and controls for application, data, infrastructure, mobile, and overall enterprise system design (preferably in an AWS Cloud environment, and/or enterprise)
* Experience in managing security incidents, business continuity testing
* Experience in implementing security & privacy standards, like: SOC2, FedRAMP, ITAR, ISO27000, GDPR, CCPA, or equivalent standards
Learn More
About Autodesk
Welcome to Autodesk! Amazing things are created every day with our software – from the greenest buildings and cleanest cars to the smartest factories and biggest hit movies. We help innovators turn their ideas into reality, transforming not only how things are made, but what can be made.
We take great pride in our culture here at Autodesk – it’s at the core of everything we do. Our culture guides the way we work and treat each other, informs how we connect with customers and partners, and defines how we show up in the world.
When you’re an Autodesker, you can do meaningful work that helps build a better world designed and made for all. Ready to shape the world and your future? Join us!
Benefits
From health and financial benefits to time away and everyday wellness, we give Autodeskers the best, so they can do their best work. Learn more about our benefits in the U.S. by visiting https://benefits.autodesk.com/
Salary transparency
Salary is one part of Autodesk’s competitive compensation package. For U.S.-based roles, we expect a starting base salary between $139,000 and $249,260. Offers are based on the candidate’s experience and geographic location, and may exceed this range. In addition to base salaries, our compensation package may include annual cash bonuses, commissions for sales roles, stock grants, and a comprehensive benefits package.
Equal Employment Opportunity
At Autodesk, we're building a diverse workplace and an inclusive culture to give more people the chance to imagine, design, and make a better world. Autodesk is proud to be an equal opportunity employer and considers all qualified applicants for employment without regard to race, color, religion, age, sex, sexual orientation, gender, gender identity, national origin, disability, veteran status or any other legally protected characteristic. We also consider for employment all qualified applicants regardless of criminal histories, consistent with applicable law.
Belonging
We take pride in cultivating a culture of belonging where everyone can thrive. Learn more here: https://www.autodesk.com/company/global-belonging
In-Person Onboarding and Identity Verification
This role may require in-person onboarding and/or in-person ID verification.
Autodesk, Inc. is a multinational software corporation founded in 1982, known for its design, engineering, and entertainment software. Headquartered in California, Autodesk empowers users across various industries, including architecture, engineering, construction, manufacturing, and media. The company aims to democratize advanced design tools, making them accessible from mainframes to personal computers. Autodesk's product portfolio includes computer-aided design (CAD), 3D modeling, simulation, Building Information Modeling (BIM), and cloud-based platforms. Its flagship products include AutoCAD, a leading CAD software, and Revit, a BIM solution. The company also offers industry-specific tools for manufacturing, civil engineering, and media and entertainment, along with cloud services for collaboration and project management. Autodesk has played a significant role in notable projects like One World Trade Center and Tesla electric cars, serving a diverse range of professionals globally.
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
3 Intel Signals
Security Philosophy
Autodesk's AppSec philosophy is centered on a 'shift-left' approach, aiming to embed security directly into the software development lifecycle (SDLC).
Their mission focuses on developer enablement rather than strict gatekeeping, emphasizing the need to provide developers with the tools and guidance to identify and remediate vulnerabilities early in their own environments.
Core practices include continuous vulnerability assessment and risk mitigation.
Security Team
Autodesk's security organization is led by Reeny Sondhi, Chief Security Officer.
The Application Security team includes specialized roles such as Principal Application Security Engineers and Application Security Engineers.
While the exact reporting line (e.g., to CISO or CTO) is not explicitly stated in verbatim text, the team is centralized within the security function and actively recruits for roles focused on embedding security into the SDLC.
A search of public professional profiles identified at least 6 individuals currently in AppSec-specific roles.
Key Initiatives
Active initiatives include the implementation of 'shift-left' security practices and the optimization of SAST tooling for developer use.
Autodesk maintains a robust vulnerability management process that includes a public security advisory page and a vulnerability disclosure program.
They also perform threat modeling and penetration testing as part of their secure SDLC.
No evidence of a formal 'Security Champions' program was found in public records.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.
