PSIRT Security Engineer/Analyst

Job Requisition ID #

22WD62742

Autodesk Security is seeking a Product Security Incident Response Team (PSIRT) Analyst to be a part of an outstanding team of security professionals with a deep passion for helping to ensure Autodesk's products and services are built securely from the ground up. You will co-manage the daily activities for the PSIRT function. This critical role will take daily direction from the PSIRT Program Lead and follow established procedures to perform intake, conduct initial analysis, and respond to reported product vulnerabilities and security concerns. This position will work closely with the incident response team to execute strategic vision for the department and assist in maturing our overall IR plans and policies. You will report to Incident Response Manager.

Responsibilities

• Perform daily operations for PSIRT Activities including intake, initial analysis, and execution of initial product security incident response (PSIRT) activities.
• In coordination with product engineers, attend to inquiries from a variety of external and internal stakeholders seeking assistance from our team.
• Co-manage the coordination for disclosures through our vulnerability disclosure program.
• Assist PSIRT Program Lead in creating, auditing, and improving PSIRT Program documentation and communications deliverables to include the PSIRT plan, playbooks, procedures, and Product Security Advisory content.
• Work across management and teams to drive the various organizational initiatives such as security fixes with product teams.
• Continuously monitor and communicate realistic expectations of capabilities, to stakeholders, including commitments to remediation timelines.
• Build and maintain collaborative working relationships with various internal functional groups and other stakeholders to effectively resolve issues and remove barriers to program success.

Qualifications

• Bachelor's (BS) degree, preferably in Computer Science, or related field or equivalent experience.
• 3 years of years of relevant industry experience in incident response, PSIRT, application security, technical program/project management, or equivalent expertise.
• 2+ years of experience working directly with engineering teams.
• Results-driven, with the ability to drive project tasks and hold others accountable.
• Excellent facilitation, negotiation, and consensus-building skills, and the ability to influence stakeholders, and drive decisions to closure.
• Proven ability to communicate technical issues to technical and non-technical audience.

#LIPOST

At Autodesk, we're building a diverse workplace and an inclusive culture to give more people the chance to imagine, design, and make a better world. Autodesk is proud to be an equal opportunity employer and considers all qualified applicants for employment without regard to race, color, religion, age, sex, sexual orientation, gender, gender identity, national origin, disability, veteran status or any other legally protected characteristic. We also consider for employment all qualified applicants regardless of criminal histories, consistent with applicable law.

Are you an existing contractor or consultant with Autodesk? Please search for open jobs and apply internally (not on this external site). If you have any questions or require support, contact Autodesk Careers.