Senior Application Security Developer

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Receive Emails For Remote Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Autodesk

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1982

📱 Media

Architecture • Engineering • Media

Autodesk is a global leader in software for designers, engineers, builders, and creators. The company provides a comprehensive suite of design and engineering applications including popular products like AutoCAD, Revit, and 3ds Max. Through its Design and Make Platform, Autodesk empowers professionals across various industries to design, visualize, and manage projects efficiently, facilitating innovation and sustainability in architecture, engineering, construction, and manufacturing.

📋 Description

• Partner with engineering teams to embed security throughout the software development lifecycle, including design reviews, threat modeling, implementation guidance, code review, and release readiness. • Identify, validate, and help remediate common application security vulnerabilities, including injection, broken access control, authentication and authorization flaws, data leakage, insecure deserialization, and server-side request forgery. • Support security reviews of AI-enabled applications and AI-assisted development workflows, including risks related to LLM-integrated systems, coding assistants, prompt injection, sensitive data exposure, and unsafe model or tool interactions. • Develop and maintain secure coding guidance, reusable security patterns, and engineering enablement materials for application, API, cloud, and data protection risks. • Integrate and improve application security testing in CI/CD pipelines, including SAST, DAST, SCA, secrets detection, infrastructure-as-code scanning, and other automated controls. • Provide developer education on secure coding, threat modeling, vulnerability remediation, secure use of third-party components, and safe adoption of emerging technologies. • Track, prioritize, and report application security risks and trends to continuously improve Autodesk's product security posture.

🎯 Requirements

• Strong understanding of application security fundamentals, including the OWASP Top 10, secure software design, common vulnerability classes, and practical mitigation techniques. • Hands-on experience securing modern web applications, APIs, microservices, and cloud-native systems. • Experience performing secure design reviews, threat modeling, code reviews, vulnerability assessments, or penetration testing. • Practical knowledge of authentication, authorization, session management, data protection, input validation, output encoding, and secure API design. • Experience identifying and mitigating vulnerabilities such as injection, broken access control, insecure deserialization, server-side request forgery, cross-site scripting, data leakage, and insecure configuration. • Experience integrating security testing and controls into CI/CD pipelines and DevSecOps workflows. • Familiarity with common application security tooling, such as SAST, DAST, SCA, secrets scanning, container scanning, or API security testing tools. • Proficiency in scripting or programming, such as Python, JavaScript, Go, Java, or similar languages, for automation, testing, or prototyping. • Ability to communicate complex security risks clearly and translate them into practical, actionable guidance for engineering teams. • Familiarity with emerging AI/LLM security risks, such as prompt injection, data exposure, unsafe tool invocation, and secure use of AI coding assistants.

🏖️ Benefits

• Annual cash bonuses • Comprehensive benefits package