DevSecOps Engineer

Position Overview

We are looking for a DevSecOps Engineer to help to further secure our customer data, applications, and infrastructure at Autodesk. This person will actively collaborate with team members and the wider Autodesk engineering community in producing quality deliverables in an efficient manner. This person will understand the AWS security landscape & deploy controls to prevent, detect and respond to those security threats. They will work across many security teams including infrastructure, engineering, operations, incident response, and offensive security to develop scalable solutions. In addition, they will actively collaborate and share ideas, thoughts and challenges with peers both inside and outside the team.

Responsibilities

• Guide shift-left adoption by introducing and improving security testing mechanisms into the company’s CI/CD pipelines (SAST, DAST, SCA, etc.)
• Develop high quality, secure, stable code for use by Autodesk security and the wider Autodesk engineering community
• Work with security stakeholders to define needs and design solutions relevant to solving a security problem
• Extend and improve existing off the shelf security tooling in order to fit into Autodesk’s use cases
• Maintain, troubleshoot, document, and debug code, as required
• Research external best practices and emerging software and security technologies for possible incorporation into platform/applications and methodologies

Minimum Qualifications

• 3 Years DevSecOps experience
• 3 Years experience securing infrastructure in AWS (IAM, VPC, EC2, Lambda, RDS, Elasticache, S3, etc.) via automation
• Strong development skills in Python, Golang or related language
• Strong design & development experience in Agile development environment
• Strong experience with REST and/or Graph APIs
• Proficiency with building, maintaining CI/CD pipelines using Jenkins, Docker and modern deployment methodologies