Application Security Engineer
Autodesk
ExperienceMinimum years of experience not specified in the official listing
QualificationB.E./B.Tech or a relevant degree background; Autodesk lists a bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent professional experience, under preferred qualifications
Salary / CTCNot disclosed by Autodesk
Key Responsibilities
- The selected candidate will help identify, assess, and mitigate security risks in software products, particularly those that use AI technologies. The key responsibilities include:
- Conducting and facilitating threat-modelling sessions with engineering teams to identify assets, trust boundaries, attack paths, risks, and suitable mitigations.
- Threat-modelling AI and LLM-powered systems, including AI-agent workflows, Retrieval-Augmented Generation (RAG) pipelines, tool and plugin integrations, and MCP servers.
- Evaluating AI security risks such as prompt injection, data leakage, excessive agency, insecure output handling, and inappropriate data access.
- Developing AI security guidance, reference architectures, and secure design patterns using frameworks such as the OWASP Top 10 for LLM Applications and MITRE ATLAS.
- Performing security reviews and hands-on testing of AI capabilities, including adversarial prompt testing and validation of security guardrails, permissions, and data-access controls.
- Developing automation and tools to scale threat modelling and AI security reviews, including templates, intake workflows, analysis scripts, and LLM-assisted tools.
- Using AI-assisted development tools such as Cursor, GitHub Copilot, and Claude Code to accelerate security-tool development while supporting secure use of these technologies.
- Tracking security findings through remediation and working with Product and Engineering teams on practical, risk-based solutions.
- Contributing to technical documentation, training, and security best practices for developers building AI-enabled products.
- Collaborating with developers, security professionals, and cross-functional stakeholders to improve Autodesk’s product security practices.
Skills & Eligibility
- According to the job description, candidates should have the following knowledge and capabilities:
- Application security: Foundational understanding of application security principles and secure software design.
- Threat modelling: Familiarity with threat-modelling methodologies such as STRIDE, data flow diagrams, and attack trees. STRIDE covers Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege.
- LLM application security: Working knowledge of how LLM-based applications are designed and developed, including their security risks.
- Programming and automation: Ability to create automation and security tools using Python, Go, or an equivalent programming language.
- AI-assisted development: Hands-on experience with AI-assisted integrated development environments (IDEs) or coding agents as part of a software development workflow.
- Modern development practices: Familiarity with Git-based version control and Continuous Integration and Continuous Deployment (CI/CD).
- Problem-solving: Ownership, curiosity, problem-solving ability, and willingness to learn in a collaborative environment.
- The following qualifications may strengthen an application:
- Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent professional experience.
- Experience performing threat modelling or security testing for Artificial Intelligence and Machine Learning (AI/ML) systems.
- Experience with AI red teaming or adversarial security testing.
- Experience building tools or integrations using LLM APIs, agent frameworks, or Model Context Protocol (MCP).
- Familiarity with AI security frameworks, including the OWASP Top 10 for LLM Applications, MITRE ATLAS, or the NIST AI Risk Management Framework (AI RMF).
- Experience working with cloud-native or containerized environments.
- Strong written and verbal communication skills, including the ability to collaborate with developers and security stakeholders.
- According to the job description, candidates should have the following knowledge and capabilities:
- Application security: Foundational understanding of application security principles and secure software design.
- Threat modelling: Familiarity with threat-modelling methodologies such as STRIDE, data flow diagrams, and attack trees. STRIDE covers Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege.
- LLM application security: Working knowledge of how LLM-based applications are designed and developed, including their security risks.
- Programming and automation: Ability to create automation and security tools using Python, Go, or an equivalent programming language.
- AI-assisted development: Hands-on experience with AI-assisted integrated development environments (IDEs) or coding agents as part of a software development workflow.
- Modern development practices: Familiarity with Git-based version control and Continuous Integration and Continuous Deployment (CI/CD).
- Problem-solving: Ownership, curiosity, problem-solving ability, and willingness to learn in a collaborative environment.
- The following qualifications may strengthen an application:
- Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent professional experience.
- Experience performing threat modelling or security testing for Artificial Intelligence and Machine Learning (AI/ML) systems.
- Experience with AI red teaming or adversarial security testing.
- Experience building tools or integrations using LLM APIs, agent frameworks, or Model Context Protocol (MCP).
- Familiarity with AI security frameworks, including the OWASP Top 10 for LLM Applications, MITRE ATLAS, or the NIST AI Risk Management Framework (AI RMF).
- Experience working with cloud-native or containerized environments.
- Strong written and verbal communication skills, including the ability to collaborate with developers and security stakeholders.
- Applicants should highlight skills that directly correspond to the responsibilities and requirements in the job description, where they genuinely have that experience.
- Application security and secure software design
- Threat modelling using STRIDE, data flow diagrams, and attack trees
- Python, Go, or comparable programming languages
- LLM application security and AI-assisted development tools
- AI security testing, red teaming, and adversarial prompt testing
- Git, CI/CD pipelines, and secure software development practices
- LLM APIs, AI-agent frameworks, RAG, and MCP
- OWASP Top 10 for LLM Applications, MITRE ATLAS, and NIST AI RMF
- Cloud-native technologies and containerized environments
- Security documentation, problem-solving, and stakeholder communication
- Do not list tools or frameworks solely because they appear in the job description. Candidates should describe relevant projects, practical exercises, internships, or professional work that demonstrates their actual skills.
- The recruitment summary mentions B.E./B.Tech. Autodesk’s official listing includes a bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent professional experience, under preferred qualifications. Review the complete official listing before applying.
- Important skills include application security, STRIDE threat modelling, knowledge of LLM application risks, Python or Go, AI-assisted development tools, Git, and CI/CD. Knowledge of AI security testing and frameworks is also relevant.
- October 20, 2026
Note: This job is posted on external sites. Joblit shares the listing for convenience and does not take responsibility for third-party content.
Apply Now Suggested Jobs
Application Support Engineer
Mumbai, Maharashtra
Graduate Engineer Trainee – Noida
Location not specified
Frontend Engineer-1 – Bengaluru
Location not specified
Software Engineer I
Location not specified
Software Consulting Engineer
Location not specified
Keysight Freshers Recruitment For IT Engineer Role- Apply Now
Location not specified
Cloud Engineer – Bengaluru
Location not specified