Senior DevSecOps Engineer

Join Autodesk as a Senior DevSecOps Engineer, where you will lead security initiatives across customer data, applications, and infrastructure. You will collaborate with multiple security and engineering teams to architect and implement scalable security solutions, drive a security-first mindset, and mentor junior team members. This role requires deep expertise in AWS security, infrastructure automation, and application security, as well as the ability to influence stakeholders at all levels.

• Lead security initiatives across customer data, applications, and infrastructure, collaborating with multiple security and engineering teams to architect and implement scalable security solutions.
• Drive the security-first mindset across the organization by designing innovative security controls, mentoring junior team members, and establishing best practices for the broader engineering community.
• Lead shift-left security initiatives by introducing and implementing advanced security testing frameworks within CI/CD pipelines, while establishing metrics and best practices for the broader organization.
• Basic scripting or automation experience in a language such as Python, Golang, or equivalent
• Deep knowledge of application security practices including secure coding, OWASP Top 10, API security, threat modelling, and common vulnerability categories (SAST, DAST, SCA)
• Familiarity with CI/CD pipelines and modern development workflows (e.g., Git-based version control)
• Strong REST and GraphQL API experience, including security implications of API design, authentication, authorization, and API-centric architectures
• Experience automating security or development workflows using Python or similar scripting languages
• 7+ years of experience in security operations, application security, or DevSecOps roles, with at least 3+ years in a senior or lead capacity
• Proven ability to design security architectures that address complex threat models and organizational compliance requirements at scale
• Familiarity with vulnerability management processes and remediation prioritization
• Excellent communication and leadership skills with the ability to influence and communicate technical security concepts clearly to diverse audiences (executives, developers, security teams, operations)