26WD97513, Senior Application Security DeveloperL'affichage de poste en français suivra / The French job posting follows.Position OverviewOur team of security experts helps Autodesk design, build, deploy and maintain secure products. We are embedding security in the full spectrum of how we build our products from inception, design, development, testing to how we are running them in the cloud as well as how we are responding to any existing or emerging threats to our products or the building blocks of our products and services. Our job is to be one step ahead of the bad guys and use expertise, technology and other resources to thwart their efforts to compromise our products and the environment in which they operate. Our team keeps a single-minded focus on protecting our customer's data and their investment in our products by strengthening our applications, underlying services and network.As part of this team, you will help strengthen Autodesk's products by partnering with product and engineering teams to design, build, deploy, and operate secure applications and services. This role focuses on application security across the software development lifecycle, including secure design, threat modeling, code review, vulnerability assessment, secure coding guidance, and security testing in CI/CD pipelines.You will work across modern cloud-native applications, APIs, services, and developer platforms to identify and mitigate risks such as injection, broken access control, and supply chain weaknesses. As Autodesk continues to adopt AI-enabled features and AI-assisted development workflows, you will also help teams understand and address emerging AI-related risks, including prompt injection, unsafe tool invocation, data exposure, and insecure use of LLM-enabled systems.ResponsibilitiesPartner with engineering teams to embed security throughout the software development lifecycle, including design reviews, threat modeling, implementation guidance, code review, and release readinessIdentify, validate, and help remediate common application security vulnerabilities, including injection, broken access control, authentication and authorization flaws, data leakage, insecure deserialization, and server-side request forgerySupport security reviews of AI-enabled applications and AI-assisted development workflows, including risks related to LLM-integrated systems, coding assistants, prompt injection, sensitive data exposure, and unsafe model or tool interactionsDevelop and maintain secure coding guidance, reusable security patterns,



and engineering enablement materials for application, API, cloud, and data protection risksIntegrate and improve application security testing in CI/CD pipelines, including SAST, DAST, SCA, secrets detection, infrastructure-as-code scanning, and other automated controlsProvide developer education on secure coding, threat modeling, vulnerability remediation, secure use of third-party components, and safe adoption of emerging technologiesTrack, prioritize, and report application security risks and trends to continuously improve Autodesk's product security postureMinimum Qualifications3–5 years of experience in application security, penetration testing, or a related fieldFamiliarity with common application security tooling, such as SAST, DAST, SCA, secrets scanning, container scanning, or API security testing toolsStrong understanding of application security fundamentals, including the OWASP Top 10, secure software design, common vulnerability classes, and practical mitigation techniquesHands-on experience securing contemporary web applications, APIs, microservices, and cloud-native systemsExperience performing secure design reviews, threat modeling, code reviews, vulnerability assessments, or penetration testingPractical knowledge of authentication, authorization, session management, data protection, input validation, output encoding, and secure API designExperience identifying and mitigating vulnerabilities such as injection, broken access control, insecure deserialization, server-side request forgery, cross-site scripting, data leakage, and insecure configurationExperience integrating security testing and controls into CI/CD pipelines and DevSecOps workflowsProficiency in scripting or programming, such as Python, JavaScript, Go, Java, or similar languages, for automation, testing, or prototypingAbility to communicate complex security risks clearly and translate them into practical, actionable guidance for engineering teamsFamiliarity with emerging AI/LLM security risks, such as prompt injection, data exposure, unsafe tool invocation, and secure use of AI coding assistantsPreferred QualificationsBackground in application security, product security,



or security engineering for large-scale software products or cloud servicesExperience building or improving secure development lifecycle programs, including developer enablement, security standards, secure design patterns, and automated security controlsFamiliarity with cloud security concepts across AWS, Azure, or GCP.Experience working with engineering teams to prioritize security findings based on exploitability, business impact, and customer riskKnowledge of software supply chain security, including dependency management, SBOMs, package integrity, build pipeline security, and third-party component riskExperience securing APIs, distributed systems, SaaS platforms, or multi-tenant cloud environmentsFamiliarity with AI-enabled applications, LLM-integrated systems, AI coding assistants, or security testing approaches for AI-assisted development workflowsExperience contributing to internal security standards, playbooks, secure coding guidance, or developer training programsLearn MoreAbout AutodeskWelcome to Autodesk! Amazing things are created every day with our software – from the greenest buildings and cleanest cars to the smartest factories and biggest hit movies. We help innovators turn their ideas into reality, transforming not only how things are made, but what can be made.We take great pride in our culture here at Autodesk – it's at the core of everything we do. Our culture guides the way we work and treat each other, informs how we connect with customers and partners, and defines how we show up in the world.When you're an Autodesker, you can do meaningful work that helps build a better world designed and made for all. Ready to shape the world and your future? Join us!Salary transparencySalary is one part of Autodesk's competitive compensation package. For Canada based roles, we expect a starting base salary between $101,000 and $148,500. Offers are based on the candidate's experience and geographic location, and may exceed this range. In addition to base salaries, our compensation package may include annual cash bonuses, commissions for sales roles, stock grants, and a comprehensive benefits package.BelongingWe take pride in cultivating a culture of belonging where everyone can thrive. Learn more here: https://www.Autodesk.Com/company/global-belongingIn-Person Onboarding and Identity VerificationThis role may require in-person onboarding and/or in-person ID verification.Are you an existing contractor or consultant with Autodesk? #J-18808-Ljbffr

📌 Senior Application Security Developer (Montreal)
🏢 Autodesk
📍 Montreal