Senior Detection Engineer and Threat Hunter

Position Overview

Autodesk is seeking an experienced Detection Engineer & Threat Hunter to help mature and support our structured hunting and detection engineering initiatives. You will execute threat hunting and detection engineering engagements within and outside of the Trust team, analyze artifacts collected from security events, and engage with our Incident Response team and Trust stakeholders where appropriate. You will be collaborating closely with existing Detection Engineers & Threat Hunters, Cyber Threat Intelligence Analysts, Security Logging/SOAR/SIEM Engineers, and various stakeholders within and outside of our Trust organization to support efforts proactively reducing Autodesk's enterprise and product platform attack surfaces. This position offers flexibility, allowing for remote work anywhere in India, or hybrid if located near an Autodesk site.
Responsibilities

• Perform tailored driven threat hunts, analysis, and detection engineering in support of priority intelligence requirements to identify advanced threats

• Build, test, and deploy detections, automations, and alerts using modern software engineering practices (e.g. automated testing/validation and Detections-as-Code)

• Research, document, and develop threat detections based on behavioral attributes of actors, malware operators, and general threats to Autodesk interests

• Prescribe expert recommendations on ways to improve detection, response, and enterprise defense capabilities

• Drive a transparent and respectful team culture centered on collaboration, listening, and recognition of team members at all levels

• Support our purple team and attack simulation engagements across Security and Product teams

• Adopt, adapt, and document workflows that are unique to supporting and defending Autodesk's corporate and commercial environments

• Deploy, maintain, and test supportive infrastructure such as server-less functions, cloud compute instances, and more using DevOps best practices.

 
Minimum Qualifications

• Excellent written and verbal communication skills in English, and regional languages (strongly desired)

• Deep and practical knowledge implementing structured hunting operations centered on adversary lifecycle analysis

• Strong proficiency in logging, threat data engineering and analysis

• Hands on experience analyzing diverse tooling and log/data sources, such as AWS, Azure, GCP, AD, DNS, proxy, firewall, EDR, webserver, and/or SaaS applications

• Ability to present and explain threats and technology to varied audiences

• 5+ years of experience working in a threat hunting, threat intelligence, incident response, security engineering (e.g. SIEM or SOAR), or detection engineering role.

• Experience deploying and maintaining cloud compute resources in environments such as AWS, Azure, or GCP.

• Proficiency in common programming languages such as Python, Go, PowerShell, or others.

 
Preferred Qualifications

• 3+ years working in detection engineering and/or threat hunting focused on implementing, sustaining, and enhancing structured hunt operations

• Certifications (any security certification similar but not exclusive to the following): GCIA, GCIH, GREM, GCTI, GCTD, GCDA, GSEC, GCED, GDAT

• Education: BA/BS in computer science, information security, or a related field, or equivalent experience

 
#LI-PJ1