Job Requisition ID #

24WD84593

Position Overview
As the Senior Manager for Secure Posture Management (SPM), you will be responsible for guiding, defining, and implementing Autodesk's overall posture management strategies, programs, and organization. This role will include management of Cloud Security Posture Management, golden image pipelines, and vulnerability management processes. In this role, you will collaborate with other leaders to shape our posture management strategies throughout the organization, serving a diverse audience that includes both developers and end-users. Your expertise in posture management, security engineering, and cloud security will play a crucial role in ensuring that Autodesk's systems and services

• Define and execute a unified security posture management strategy including CSPM, golden image pipelines, infrastructure as code templates, and vulnerability management.
• Regularly report on security posture, vulnerability trends, and mitigation progress to executive stakeholders.
• Work with development teams to align security initiatives with business goals, from design to runtime.
• Develop and refine standards for secure cloud configurations in alignment with industry frameworks, such as CIS benchmarks.
• Use Cloud Security Posture Management tooling to continuously monitor multiple cloud environments (AWS, Azure, GCP) for misconfigurations, security gaps, and compliance issues.
• Work to enhance features and ease of use for our golden image and Infrastructure as Code (IaC) pipelines.
• Monitor and remediate drift from golden images to ensure security across all environments.
• Oversee the vulnerability management program and lead remediation efforts across all cloud and data center assets.
• Build and mentor a team of security engineers across the globe, specializing in configuration and vulnerability management.

• Bachelor's degree in computer science, information security, or a related field (Master's degree preferred)
• 10 years of experience in information security and 2 years of management experience, with a focus on security engineering, enterprise security, cloud security, and vulnerability management.
• Extensive experience with CSPM tools and vulnerability management platforms such as Prisma Cloud, Qualys, Rapid7, Tenable, and Wiz.
• Experience developing/managing golden image pipelines.
• Knowledge of secure configuration management, hardening standards, and automation tools.