Autodesk is a global leader in design software and services, empowering creators across architecture, engineering, construction, manufacturing, media and entertainment. With a heritage of innovation spanning more than three decades, Autodesk’s cloud‑first strategy and AI‑driven product portfolio have positioned it at the forefront of digital transformation. The company’s culture emphasizes creativity, collaboration, and continuous learning, offering employees the chance to work on products that shape the future of how the world designs and builds. The Application Security Engineer role in Bengaluru is part of Autodesk’s Product Security team, which embeds security throughout the software development lifecycle. The position focuses on safeguarding AI‑enabled applications, large language model (LLM) integrations, and emerging AI agents. Engineers in this team partner with product, engineering, and platform groups to identify threats, design mitigations, and build automation that scales security reviews across the organization. Key responsibilities include: 1. Conducting and facilitating STRIDE‑based threat‑modelling workshops for AI‑powered services. 2. Evaluating LLM application risks such as prompt injection, data leakage, and excessive agency. 3. Developing security guidance, reference architectures, and secure design patterns using frameworks like OWASP Top 10 for LLM Applications and MITRE ATLAS. 4. Performing hands‑on security testing, adversarial prompt testing, and validation of guardrails for AI features. 5. Building automation tools and scripts (Python/Go) to streamline threat‑modelling and security review processes. 6. Integrating security checks into CI/CD pipelines and supporting secure use of AI‑assisted development tools (e.g., GitHub Copilot, Cursor). 7. Tracking findings, driving remediation, and collaborating with engineering owners for risk‑based solutions. 8. Contributing to documentation, training sessions, and knowledge‑sharing initiatives for developers. 9. Working with cloud‑native and containerized environments to ensure secure deployment configurations. 10. Staying abreast of emerging AI security threats and industry best practices. The tech stack revolves around Python, Go, Git, CI/CD platforms (Jenkins, GitHub Actions), container orchestration (Kubernetes), and cloud services (AWS/Azure). Candidates will also engage with LLM APIs, Retrieval‑Augmented Generation pipelines, and Model Context Protocol implementations. Growth at Autodesk is structured; security engineers can progress to Senior Engineer, Lead Security Architect, or Manager roles, with opportunities to specialize in AI security, cloud security, or governance. The company offers mentorship programs, internal mobility, and access to cutting‑edge research labs. Why join Autodesk? You will work on high‑impact AI products used by millions, collaborate with world‑class engineers, and be part of a culture that values curiosity, diversity, and impact. The role offers a blend of deep technical challenges and the chance to influence security strategy for next‑generation design tools.