Security Engineer, FedRamp/GovCloud

Autodesk•Atlanta, GA

13d•$139,000 - $249,260•Onsite

About The Position

Autodesk is looking for an experienced, enthusiastic Product Security Engineer who will be an important partner in creating and delivering trusted solutions for the Fusion Platform organization. As a Product Security Engineer, you will be involved in efforts to support and influence engineering teams, you will also lead cross-team security programs, represent the Trust organization, support the SOC2 and FedRAMP audit processes, and provide technical-security focused leadership for all Fusion. In accordance with U.S. government contracting and FedRAMP compliance obligations, this role requires U.S. citizenship or U.S. lawful permanent residency. Employment is contingent upon meeting all applicable government security and eligibility requirements.

Requirements

Bachelor’s degree in computer science, Information Technology and Engineering or related field (or equivalent experience)
5+ years of information security, cybersecurity, or privacy experience
Exceptional knowledge and experience in security assessments and testing, vulnerability assessment, secure software development and application security, penetration testing
Demonstrated knowledge of information security risks and controls for application, data, infrastructure, mobile, and overall enterprise system design (preferably in an AWS Cloud environment, and/or enterprise)
Experience in managing security incidents, business continuity testing
Experience in implementing security & privacy standards, like: SOC2, FedRAMP, ITAR, ISO27000, GDPR, CCPA, or equivalent standards
U.S. citizenship or U.S. lawful permanent residency

Responsibilities

Coordinate regular security testing (vulnerability assessments, penetration testing, application security)
Perform product security reviews, threat model, secure coding practices, application, and infrastructure security review
Perform continuous risk assessment, propose, and track remediation actions
Review all access to critical systems and data
Closely work with Security team, engineering, and product teams to implement and maintain corporate security objectives, and to drive the implementation of security & privacy requirements
Support efforts for monitoring, detecting, responding, and investigating security incidents
Coordinate business continuity, disaster recovery testing
Contribute to security awareness, as well as periodic security updates and reminder communications for all team members
Implement and maintain security and privacy strategy and requirements, aligned with the company objectives