Application Security Engineer

I korthet

Autodesk recherche un ingénieur en sécurité applicative pour aider à concevoir, construire et déployer des produits sécurisés alimentés par l'IA. Ce rôle implique la modélisation des menaces pour les systèmes d'IA et LLM, le développement d'automatisation de sécurité et la collaboration avec les équipes d'ingénierie. Une compréhension des principes de sécurité applicative et des compétences en programmation Python/Go sont requises.

Ansvarsområden

Conduct and facilitate threat modeling sessions with Engineering teams to identify assets, trust boundaries, attack paths, security risks, and appropriate mitigations for new and evolving product capabilities
Threat model AI and Large Language Model (LLM)-powered systems, including agentic workflows, Retrieval-Augmented Generation (RAG) pipelines, tool and plugin integrations, and Model Context Protocol (MCP) servers
Evaluate AI systems for security risks such as prompt injection, data leakage, excessive agency, insecure output handling, and inappropriate data access
Develop and maintain Autodesk's AI security guidance, reference architectures, and secure design patterns using established frameworks such as the Open Worldwide Application Security Project (OWASP) Top 10 for Large Language Model Applications and MITRE Adversarial Threat Landscape for Artificial-Intelligence Systems (ATLAS)
Perform security reviews and hands-on testing of AI capabilities, including adversarial prompt testing and validation of security guardrails, permissions, and data access controls
Develop automation and tooling that scale threat modeling and AI security reviews, including templates, intake workflows, analysis scripts, and LLM-assisted tools
Use AI-assisted development tools such as Cursor, GitHub Copilot, and Claude Code to accelerate security tooling development while helping teams adopt these technologies securely
Track findings from threat models and security reviews through remediation, partnering with Product and Engineering teams to implement practical, risk-based solutions
Contribute to technical documentation, training, and security best practices that help developers design and build secure AI-enabled products
Collaborate with developers, security professionals, and cross-functional stakeholders to continuously improve Autodesk's product security practices

Krav

Foundational understanding of application security principles and secure software design
Familiarity with threat modeling concepts and methodologies such as Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege (STRIDE), data flow diagrams, and attack trees
Working knowledge of how Large Language Model (LLM)-based applications are designed and developed, including an understanding of their unique security risks
Ability to develop automation and security tooling using Python, Go, or an equivalent programming language
Hands-on experience using AI-assisted Integrated Development Environments (IDEs) or coding agents as part of a software development workflow
Familiarity with modern software development practices, including Git-based version control and Continuous Integration and Continuous Deployment (CI/CD)
Strong ownership, curiosity, problem-solving skills, and willingness to learn in a collaborative environment

Önskade kvalifikationer

Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent professional experience
Experience performing threat modeling or security testing for Artificial Intelligence and Machine Learning (AI/ML) systems
Experience with AI red teaming or adversarial security testing
Experience developing tools or integrations using Large Language Model (LLM) Application Programming Interfaces (APIs), agent frameworks, or Model Context Protocol (MCP)
Familiarity with AI security frameworks such as the OWASP Top 10 for Large Language Model Applications, MITRE ATLAS, or the National Institute of Standards and Technology Artificial Intelligence Risk Management Framework (NIST AI RMF)
Experience working with cloud-native or containerized environments
Strong written and verbal communication skills with the ability to collaborate effectively with developers and security stakeholders

#application security#AI#LLM#threat modeling#automation#software development

Om Autodesk

Changing how the world is designed and made.

Autodesk is changing how the world is designed and made. Our technology spans architecture, engineering, construction, product design, manufacturing, media, and entertainment, empowering innovators everywhere to solve challenges big and small. From greener buildings to smarter products to more mesmerizing blockbusters, Autodesk software helps our customers to design and make a better world for all. \n\nOver 100 million people use Autodesk software like AutoCAD, Revit, Maya, 3ds Max, Fusion 360, SketchBook, and more to unlock their creativity and solve important design, business and…

Se alla lediga jobb hos Autodesk Läs mer om Autodesk Webbplats