IT Security Project Manager RV085

Position: IT Security Project Manager Work location: San Francisco, CA Wage: $140,566 - $175,000 / per year Job Duties: Plan, initiate, and manage information technology (IT) security projects. Lead and guide the work of technical staff for projects. Serve as liaison between business and technical aspects of projects. Monitor progress to assure deadline targets and standards are met. Manage project execution to ensure adherence to schedule and scope. Confer with project personnel to identify and resolve problems. Monitor or track project milestones and deliverables. Submit project deliverables, ensuring adherence to quality standards. Assess current or future customer needs and priorities by communicating directly with product teams, other security teams, and leadership of both groups. Develop and operationalize a Zero Day Response Framework that enables rapid detection, assessment, and coordinated remediation of emerging threats by utilizing knowledge of threat intelligence feeds, product specific risk prioritization, stakeholder engagement, and end to end automation. Build standardized reporting workflows that deliver consistent trends and actionable insights for product teams and stakeholders by utilizing knowledge of scripting and security automation. Embed early-stage security checks, automate vulnerability detection, and implement secure configuration hardening across build pipelines and containerized application deployments by utilizing knowledge of CI/CD shift left security scanners, Spinnaker, and Jenkins. Some telecommuting is permitted. Minimum Requirements: Masters degree in Computer Science, Information Security or related field and three (3) years of experience in the job offered or in a security engineer-related occupation. Some telecommuting is permitted. Special Requirements: Position requires three (3) years of experience in each of the following skills: 1. Utilize knowledge of threat intelligence feeds, product specific risk prioritization, stakeholder engagement, and end to end automation to develop and operationalize a Zero Day Response Framework that enables rapid detection, assessment, and coordinated remediation of emerging threats. 2. Utilize knowledge of pentesting techniques, open source security frameworks such as OWASP Top 10, and scanning tools like Nuclei to build and operationalize an Attack Surface Management platform that continuously discovers, analyzes, and monitors exposed assets. 3. Utilize knowledge of CSPM tooling (Orca, Wiz, Divvy), cloud security principles, SCA tooling (Snyk, Black Duck), and risk prioritization to enhance and mature the Vulnerability Management Program through improved visibility, contextual risk scoring, and streamlined remediation workflows. 4. Utilize knowledge of the MITRE ATT&CK Framework, cloud security principles, product context, and threat modeling methodologies to drive effective remediation of cloud misconfigurations and strengthen overall cloud security posture. 5. Utilize knowledge of scripting and security automation to build standardized reporting workflows that deliver consistent trends and actionable insights for product teams and stakeholders. 6. Utilize knowledge of risk analysis, vulnerability assessment, and product specific impact analysis to develop and operationalize a comprehensive vulnerability risk prioritization framework that evaluates severity, exploitability, business impact, and asset criticality to enable consistent, data driven prioritization and timely remediation of security vulnerabilities. 7. Utilize knowledge of AI services, AI infrastructure, and enterprise wide AI inventory assessment to develop, maintain, and continuously enhance the organizations AI Inventory and Risk Posture (AISPM), including identification of AI assets, evaluation of associated risks, enforcement of governance controls, and ongoing monitoring of compliance and security posture across all AI systems 8. Utilize knowledge of Kubernetes Secure Posture Management (KSPM), Kubernetes security controls, and container orchestration security to assess, monitor, and enhance Kubernetes cluster security posture across runtime, configuration, and workload environments. 9. Utilize knowledge of CI/CD shift left security scanners, Spinnaker, and Jenkins to embed early stage security checks, automate vulnerability detection, and implement secure configuration hardening across build pipelines and containerized application deployments. 10. Utilize knowledge of security tooling evaluation, proof of concept design, and vendor collaboration to assess and validate new security solutions aligned with business requirements and maturity roadmaps. The starting base salary range for this role is reflected above. Salary is one part of Autodesks competitive package. Offers are based on the candidates experience and geographic location. TO APPLY: Please email resume to (email removed), and indicate job code RV085. Proof of authorization to work in U.S. is required if hired. The company is an Equal Opportunity Employer and fully supports affirmative action practices.