Principal Offensive Security Engineer

OverviewJob Requisition ID #25WD91774Position OverviewAre you passionate about computers, software, and the art of dismantling code, devices—even cars? Do you love protecting people from digital threats, whether they come from cybercriminals or simple human error? If you’ve ever read 2600 or celebrated the Phrack anniversary edition at DEFCON33, we might have the perfect role for you.At Autodesk, we’re transforming how the world is designed and built. Our mission is to empower customers to create energy-efficient, low-carbon-footprint buildings through cutting-edge software. We’re leading the Architecture, Engineering, and Construction (AEC) industry into a new era—one powered by AI and connected data platforms. As we grow into the Trusted Partner for the AEC industry, we’re looking for someone who can help keep our innovations secure.Autodesk is hiring a Principal Offensive Security Engineer to join our journey. In this role, you’ll bring your offensive security expertise to a team of passionate technologists. You’ll uncover critical security improvements in our products and identify creative ways to enhance our systems, processes, and practices.You’ll collaborate across teams and geographies, offering insight and support as they address vulnerabilities. You’ll help mature our Secure Software Development Lifecycle (SSDLC) across AEC teams and improve our vulnerability and zero-day response processes.We also invest in your growth—this role includes opportunities to attend top security conferences and training sessions throughout the year, so you can sharpen your skills and bring back fresh ideas.This is a remote position open to candidates in the United States or Canada (east coast strongly preferred).ResponsibilitiesWork with the Senior Distinguished Architect, Trust ; to document, maintain, and improve the AEC Secure Software Development LifecycleWork with the Trust Organization in various Security Vulnerability Management and 0-day response capacitiesManage and mature the AEC security vulnerability and DoD response processesAct as primary point of contact for AEC 0-day reports and assist in engaging Researchers and EngineersProactively fuzz, research, and investigate AEC Products and Processes for Security issues and improvementsSupport all AEC Security incident BPM processesAssist engineering teams in secure code development through expertiseHelp with setting up policies, procedures, and standards to improve Security PostureEngage with AEC engineers to establish training, awareness resources, and other mechanisms to dramatically improve the security of AEC productsPartner with other engineers across the company to share Software Security practices, lessons learned, and improve transparency and efficiencyOwn the various Security metadata components within the Software Catalog, including creation, naming, and maintainingAttend Trust meetings across the AEC organization (bi-weekly, monthly, and quarterly)Attend industry events and other conventions/conferences to gather new Software Security techniques and to continuously improve this role’s impactMinimum QualificationsBS or MS or Equivalent Experience in Cybersecurity/Computer Science (or related technical field)5+ years of hands-on Offensive Security experience or 7+ years of a mixExperience with Offensive Security tools, techniques, and methodologiesExperience working with programming languages (Eg. C, C++, C#, Rust, Go, Javascript, Java, Python, Perl, PHP, TypeScript...)Experience collaborating with cross-organizational teamsPreferred QualificationsExperience with writing reports and communicating complex security concepts to technical personnelFamiliarity with modern software practices including Continuous Integration, Continuous Delivery, and Infrastructure-as-CodeFamiliarity with Security Disciplines outside of Offensive Security (Privacy, GRC, Blue Teaming, Awareness)Familiarity with authentication/authorization using OAuth2.0, OICD, SPIFFE, FIDO2, etc.Familiarity with large-scale distributed systems, containing hybrid applications across desktop, mobile, and webExperience in the AEC industry or other regulated industry The Ideal CandidateEasily collaborates with other members of a team to deliver valueConstantly strives to learn new technologies and methodologiesIs adaptable, customer-focused, and seek new ways to solve hard problemsIs transparent and work in an open sharing manner, leveraging automationAbout AutodeskWelcome to Autodesk Amazing things are created every day with our software – from the greenest buildings and cleanest cars to the smartest factories and biggest hit movies. We help innovators turn their ideas into reality, transforming not only how things are made, but what can be made.We take great pride in our culture here at Autodesk – it’s at the core of everything we do. Our culture guides the way we work and treat each other, informs how we connect with customers and partners, and defines how we show up in the world.When you’re an Autodesker, you can do meaningful work that helps build a better world designed and made for all. Ready to shape the world and your future? Join usSalary transparencySalary is one part of Autodesk’s competitive compensation package. For U.S.-based roles, we expect a starting base salary between $138,100 and $223,300. Offers are based on the candidate’s experience and geographic location, and may exceed this range. In addition to base salaries, our compensation package may include annual cash bonuses, commissions for sales roles, stock grants, and a comprehensive benefits package.Equal Employment OpportunityAt Autodesk, we\'re building a diverse workplace and an inclusive culture to give more people the chance to imagine, design, and make a better world. Autodesk is proud to be an equal opportunity employer and considers all qualified applicants for employment without regard to race, color, religion, age, sex, sexual orientation, gender, gender identity, national origin, disability, veteran status or any other legally protected characteristic. We also consider for employment all qualified applicants regardless of criminal histories, consistent with applicable law.Diversity & BelongingWe take pride in cultivating a culture of belonging where everyone can thrive. Learn more here: Diversity & BelongingAre you an existing contractor or consultant with Autodesk?Please search for open jobs and apply internally (not on this external site). #J-18808-Ljbffr