Application Security Engineer

Job Requisition ID #

26WD100819

Position Overview

Our team of security experts helps Autodesk design, build, deploy, and maintain secure products. We embed security throughout the product development lifecycle, from inception, design, development, and testing to cloud operations and our response to existing and emerging threats.

Our goal is to stay ahead of evolving security threats by combining deep expertise, technology, and automation to protect Autodesk products and the environments in which they operate. We maintain a strong focus on protecting customer data and investments by strengthening our applications, underlying services, and networks.

As part of this team, you will help Autodesk build and deliver Artificial Intelligence (AI)-powered products securely. You will partner with Product and Platform teams to threat model new features and systems, with a particular focus on applications that use Large Language Models (LLMs), AI agents, and AI-assisted workflows.

You will also develop code and automation to scale security practices, using modern AI-assisted development tools as part of your daily workflow. This is an opportunity to develop your product security expertise at the forefront of AI while helping Autodesk stay ahead of emerging security threats.

Responsibilities

Conduct and facilitate threat modeling sessions with Engineering teams to identify assets, trust boundaries, attack paths, security risks, and appropriate mitigations for new and evolving product capabilitiesThreat model AI and Large Language Model (LLM)-powered systems, including agentic workflows, Retrieval-Augmented Generation (RAG) pipelines, tool and plugin integrations, and Model Context Protocol (MCP) serversEvaluate AI systems for security risks such as prompt injection, data leakage, excessive agency, insecure output handling, and inappropriate data accessDevelop and maintain Autodesk's AI security guidance, reference architectures, and secure design patterns using established frameworks such as the Open Worldwide Application Security Project (OWASP) Top 10 for Large Language Model Applications and MITRE Adversarial Threat Landscape for Artificial-Intelligence Systems (ATLAS)Perform security reviews and hands-on testing of AI capabilities, including adversarial prompt testing and validation of security guardrails, permissions, and data access controlsDevelop automation and tooling that scale threat modeling and AI security reviews, including templates, intake workflows, analysis scripts, and LLM-assisted toolsUse AI-assisted development tools such as Cursor, GitHub Copilot, and Claude Code to accelerate security tooling development while helping teams adopt these technologies securelyTrack findings from threat models and security reviews through remediation, partnering with Product and Engineering teams to implement practical, risk-based solutionsContribute to technical documentation, training, and security best practices that help developers design and build secure AI-enabled productsCollaborate with developers, security professionals, and cross-functional stakeholders to continuously improve Autodesk's product security practices

Minimum Qualifications

Foundational understanding of application security principles and secure software designFamiliarity with threat modeling concepts and methodologies such as Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege (STRIDE), data flow diagrams, and attack treesWorking knowledge of how Large Language Model (LLM)-based applications are designed and developed, including an understanding of their unique security risksAbility to develop automation and security tooling using Python, Go, or an equivalent programming languageHands-on experience using AI-assisted Integrated Development Environments (IDEs) or coding agents as part of a software development workflowFamiliarity with modern software development practices, including Git-based version control and Continuous Integration and Continuous Deployment (CI/CD)Strong ownership, curiosity, problem-solving skills, and willingness to learn in a collaborative environment

Preferred Qualifications

Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent professional experienceExperience performing threat modeling or security testing for Artificial Intelligence and Machine Learning (AI/ML) systemsExperience with AI red teaming or adversarial security testingExperience developing tools or integrations using Large Language Model (LLM) Application Programming Interfaces (APIs), agent frameworks, or Model Context Protocol (MCP)Familiarity with AI security frameworks such as the OWASP Top 10 for Large Language Model Applications, MITRE ATLAS, or the National Institute of Standards and Technology Artificial Intelligence Risk Management Framework (NIST AI RMF)Experience working with cloud-native or containerized environmentsStrong written and verbal communication skills with the ability to collaborate effectively with developers and security stakeholders

The Ideal Candidate

The ideal candidate is a curious and technically driven security professional who combines foundational application security expertise with a strong interest in Artificial Intelligence security and secure software development

Applies application security principles and threat modeling methodologies to identify and mitigate risks across modern software systemsAnalyzes security challenges using structured problem-solving approaches and established security practicesExercises sound judgment when evaluating security risks and determining appropriate mitigation strategiesTakes ownership of assigned security reviews, tooling, and remediation activities while seeking guidance on unfamiliar or highly complex situationsDevelops practical automation and tooling that improve the efficiency and scalability of security processesDemonstrates curiosity about emerging Artificial Intelligence technologies and continuously develops expertise in AI security threats and mitigation techniquesCollaborates effectively with Product, Engineering, Platform, and Security teams to develop practical and secure solutionsCommunicates security risks and recommendations clearly to both security and engineering audiencesIncorporates feedback from experienced team members to continuously strengthen technical and security expertiseBalances innovation with responsible security practices when using Artificial Intelligence-assisted development toolsContributes to documentation, knowledge sharing, and continuous improvement across the Product Security organizationDemonstrates accountability, adaptability, and a strong commitment to protecting Autodesk products and customer data

Learn More

About Autodesk

Welcome to Autodesk! Amazing things are created every day with our software – from the greenest buildings and cleanest cars to the smartest factories and biggest hit movies. We help innovators turn their ideas into reality, transforming not only how things are made, but what can be made.

We take great pride in our culture here at Autodesk – it’s at the core of everything we do. Our culture guides the way we work and treat each other, informs how we connect with customers and partners, and defines how we show up in the world.

When you’re an Autodesker, you can do meaningful work that helps build a better world designed and made for all. Ready to shape the world and your future? Join us!

Salary transparency

Salary is one part of Autodesk’s competitive compensation package. Offers are based on the candidate’s experience and geographic location. In addition to base salaries, our compensation package may include annual cash bonuses, commissions for sales roles, stock grants, and a comprehensive benefits package.

Belonging

We take pride in cultivating a culture of belonging where everyone can thrive. Learn more here: https://www.autodesk.com/company/global-belonging

In-Person Onboarding and Identity Verification

This role may require in-person onboarding and/or in-person ID verification.