Security Engineer, Autodesk

• Bachelor's degree in Computer Science, Cyber Security, Computer Networks, Information Technology or equivalent
• 3-5 years’ experience with SIEM solutions and log management/collection platform like Splunk Cloud, Enterprise Security, Datadog., etc
• Hands-on experience with event mapping, data normalization and optimization, CIM and standardization
• 1-3 years’ experience writing automation using python, Infrastructure as code(Terraform, CloudFormation) and other common programming/scripting languages
• Experience analyzing threats, risks, vulnerabilities and exploits using Security and Infrastructure log data at scale
• Familiarity with Security detection, response and threat analysis processes
• Experience with public cloud platforms such as AWS, Azure and GCP
• Experience with designing and building Infrastructure for long term log retention, archival and retrieval
• Excellent verbal and written communication skills

Desirable

• We are looking for an experienced Security Engineer who can design, build, develop, engineer and mature our Security Observability/Logging framework and data engineering pipelines supporting Security Logging use cases
• Onboard new data/log sources that increase Security visibility to our centralized log management platform
• Collect requirements and use cases from our internal Security stakeholders, identify events and fields of interest, and optimize the data sent to the log management platform using filtering engines like cribl, fluentd/fluent bit, open telemetry., etc
• Build Infrastructure and develop automations to support centralized log collection/ingestion, data analytics, normalization and optimization, and correlation
• Setup integrations between log management platform and other critical Security tools like SOAR, asset inventory, reporting dashboard, EDR, WAF, CSPM., etc
• Manage peripheral infrastructure supporting log management including Security indexes, add-ons, TAs, data schema for Security logs
• Improve Autodesk’s ability to detect intrusions in real-time by creating innovative solutions to complex security observability problems
• Support Security tooling and other detection/protection capabilities including EDR, WAF, network monitoring, threat detection services like Guard Duty/Microsoft Defender for Cloud
• Assist with incident response and investigations as needed, as a SME in logging
• Assist in the implementation and evaluation of regulatory compliance initiatives related to Security logging