Security Engineer, FedRamp/GovCloud - Autodesk

Job Requisition ID #

Position Overview Autodesk is looking for an experienced, enthusiastic Product Security Engineer who will be an important partner and in creating and delivering trusted solutions for the Fusion Platform organization. As a Product Security Engineer, you will be involved in efforts to support and influence engineering teams, you will also lead cross-team security programs, represent the Trust organization, support the SOC2 and FedRAMP audit processes, and provide technical-security focused leadership for all Fusion.

In accordance with U.S. government contracting and FedRAMP compliance obligations, this role requires U.S. citizenship or U.S. lawful permanent residency. Employment is contingent upon meeting all applicable government security and eligibility requirements.

Responsibilities

Coordinate regular security testing (vulnerability assessments, penetration testing, application security)

Perform product security reviews, threat model, secure coding practices, application, and infrastructure security review

Perform continuous risk assessment, propose, and track remediation actions

Review all access to critical systems and data

Closely work with Security team, engineering, and product teams to implement and maintain corporate security objectives, and to drive the

implementation of security & privacy requirements

Support efforts for monitoring, detecting, responding, and investigating security incidents

Coordinate business continuity, disaster recovery testing

Contribute to security awareness, as well as periodic security updates and reminder communications for all team members

Implement and maintain security and privacy strategy and requirements, aligned with the company objectives

Minimum Qualifications

Bachelor’s degree in computer science, Information Technology and Engineering or related field (or equivalent experience)

5+ years of information security, cybersecurity, or privacy experience

Exceptional knowledge and experience in security assessments and testing, vulnerability assessment, secure software development and application security, penetration testing

Demonstrated knowledge of information security risks and controls for application, data, infrastructure, mobile, and overall enterprise system design (preferably in an AWS Cloud environment, and/or enterprise)

Experience in managing security incidents, business continuity testing

Experience in implementing security & privacy standards, like: SOC2, FedRAMP, ITAR, ISO27000, GDPR, CCPA, or equivalent standards

Learn More

About Autodesk

Welcome to Autodesk! Amazing things are created every day with our software – from the greenest buildings and cleanest cars to the smartest factories and biggest hit movies. We help innovators turn their ideas into reality, transforming not only how things are made, but what can be made.