Senior Manager, Secure Posture Management

24WD84593

Position Overview
As the Senior Manager for Secure Posture Management (SPM), you will be responsible for guiding, defining, and implementing Autodesk’s overall posture management strategies, programs, and organization. This role will include management of Cloud Security Posture Management, golden image pipelines, and vulnerability management processes. In this role, you will collaborate with other leaders to shape our posture management strategies throughout the organization, serving a diverse audience that includes both developers and end-users. Your expertise in posture management, security engineering, and cloud security will play a crucial role in ensuring that Autodesk’s systems and services
meet the highest security standards and align with our industry-leading practices and regulatory requirements.
Location: Kraków, Poland, hybrid working model

• Define and execute a unified security posture management strategy including CSPM, golden image pipelines, infrastructure as code templates, and vulnerability management.
• Regularly report on security posture, vulnerability trends, and mitigation progress to executive stakeholders.
• Work with development teams to align security initiatives with business goals, from design to runtime.
• Develop and refine standards for secure cloud configurations in alignment with industry frameworks, such as CIS benchmarks.
• Use Cloud Security Posture Management tooling to continuously monitor multiple cloud environments (AWS, Azure, GCP) for misconfigurations, security gaps, and compliance issues.
• Work to enhance features and ease of use for our golden image and Infrastructure as Code (IaC) pipelines.
• Monitor and remediate drift from golden images to ensure security across all environments.
• Oversee the vulnerability management program and lead remediation efforts across all cloud and data center assets.
• Build and mentor a team of security engineers across the globe, specializing in configuration and vulnerability management.

Minimum Qualifications

• Bachelor's degree in computer science, information security, or a related field (Master's degree preferred)
• 10 years of experience in information security and 2 years of management experience, with a focus on security engineering, enterprise security, cloud security, and vulnerability management.
• Extensive experience with CSPM tools and vulnerability management platforms such as Prisma Cloud, Qualys, Rapid7, Tenable, and Wiz.
• Experience developing/managing golden image pipelines.
• Knowledge of secure configuration management, hardening standards, and automation tools.

Learn More

About Autodesk
Welcome to Autodesk! Amazing things are created every day with our software – from the greenest buildings and cleanest cars to the smartest factories and biggest hit movies. We help innovators turn their ideas into reality, transforming not only how things are made, but what can be made.

We take great pride in our culture here at Autodesk – our Culture Code is at the core of everything we do. Our values and ways of working help our people thrive and realize their potential, which leads to even better outcomes for our customers.

When you’re an Autodesker, you can be your whole, authentic self and do meaningful work that helps build a better future for all. Ready to shape the world and your future? Join us!

Salary transparency

Salary is one part of Autodesk’s competitive compensation package. Offers are based on the candidate’s experience and geographic location. In addition to base salaries, we also have a significant emphasis on discretionary annual cash bonuses, commissions for sales roles, stock or long-term incentive cash grants, and a comprehensive benefits package.

Diversity & Belonging
We take pride in cultivating a culture of belonging and an equitable workplace where everyone can thrive. Learn more here: https://www.autodesk.com/company/diversity-and-belonging

Are you an existing contractor or consultant with Autodesk?

Please search for open jobs and apply internally (not on this external site).