Autodesk

2 days ago

Application Security Developer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 19 hours agoStatus: Live

Job Summary

Partner with engineering and product teams to embed application security across the software development lifecycle. You’ll perform threat modeling, secure design reviews, code review, and vulnerability assessments, and help remediate issues across web apps, APIs, microservices, and cloud-native systems. Integrate and improve security testing in CI/CD pipelines (SAST/DAST/SCA and related controls), develop secure coding guidance, and support security reviews for AI-enabled and LLM-assisted development workflows.

Location: Vancouver, Toronto

Workplace: Onsite

Employment Type: Full time

Job Function: Software Engineering

Key Responsibilities

•Embed security throughout the software development lifecycle through design reviews, threat modeling, implementation guidance, code review, and release readiness.
•Identify, validate, and help remediate application security vulnerabilities including injection, broken access control, authentication/authorization flaws, data leakage, insecure deserialization, and SSRF.
•Conduct security reviews for AI-enabled applications and AI-assisted workflows, including risks like prompt injection, sensitive data exposure, and unsafe tool/model interactions.
•Develop and maintain secure coding guidance, reusable security patterns, and engineering enablement materials for application, API, cloud, and data protection risks.
•Integrate and improve security testing in CI/CD pipelines using automated controls such as SAST, DAST, SCA, secrets detection, and infrastructure-as-code scanning.

Pay and Benefits

Equity and Bonus:Equity

Key Requirements

•Strong understanding of application security fundamentals, including the OWASP Top 10, secure software design, and common vulnerability mitigation techniques.
•Hands-on experience securing modern web applications, APIs, microservices, and cloud-native systems.
•Experience performing secure design reviews, threat modeling, code reviews, vulnerability assessments, or penetration testing.
•Practical knowledge of authentication/authorization, session management, data protection, input validation/output encoding, and secure API design.
•Ability to integrate security testing and controls into CI/CD pipelines and DevSecOps workflows, using common tooling (SAST, DAST, SCA, secrets/container/API scanning).

Skills:CommunicationProblem-solving

Tech Stack:OWASP Top 10CI/CDDevSecOpsSASTDASTSCASecrets scanningContainer scanningAPI security testingInfrastructure-as-code scanningPythonJavaScriptGoJavaAWSAzureGCPLLMPrompt injectionSBOMs

Company Brief

Autodesk

Provides design and engineering software for architecture, construction, manufacturing, media, and entertainment industries, offering CAD, BIM, and 3D modeling tools to enable product and infrastructure design workflows.

Industry: Enterprise Software

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: San Rafael, United States

Founded: 1982

Glassdoor: 3.9

Website LinkedIn Glassdoor

Loading job details...

Preparing the role view and application actions.

Autodesk

2 days ago

Application Security Developer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 19 hours agoStatus: Live

Job Summary

Location: Vancouver, Toronto

Workplace: Onsite

Employment Type: Full time

Job Function: Software Engineering

Key Responsibilities

•Embed security throughout the software development lifecycle through design reviews, threat modeling, implementation guidance, code review, and release readiness.
•Identify, validate, and help remediate application security vulnerabilities including injection, broken access control, authentication/authorization flaws, data leakage, insecure deserialization, and SSRF.
•Conduct security reviews for AI-enabled applications and AI-assisted workflows, including risks like prompt injection, sensitive data exposure, and unsafe tool/model interactions.
•Develop and maintain secure coding guidance, reusable security patterns, and engineering enablement materials for application, API, cloud, and data protection risks.
•Integrate and improve security testing in CI/CD pipelines using automated controls such as SAST, DAST, SCA, secrets detection, and infrastructure-as-code scanning.

Pay and Benefits

Equity and Bonus:Equity

Key Requirements

•Strong understanding of application security fundamentals, including the OWASP Top 10, secure software design, and common vulnerability mitigation techniques.
•Hands-on experience securing modern web applications, APIs, microservices, and cloud-native systems.
•Experience performing secure design reviews, threat modeling, code reviews, vulnerability assessments, or penetration testing.
•Practical knowledge of authentication/authorization, session management, data protection, input validation/output encoding, and secure API design.
•Ability to integrate security testing and controls into CI/CD pipelines and DevSecOps workflows, using common tooling (SAST, DAST, SCA, secrets/container/API scanning).

Skills:CommunicationProblem-solving

Tech Stack:OWASP Top 10CI/CDDevSecOpsSASTDASTSCASecrets scanningContainer scanningAPI security testingInfrastructure-as-code scanningPythonJavaScriptGoJavaAWSAzureGCPLLMPrompt injectionSBOMs

Company Brief

Autodesk

Industry: Enterprise Software

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: San Rafael, United States

Founded: 1982

Glassdoor: 3.9

Website LinkedIn Glassdoor