Senior Principal Data Security Engineer

Position Overview

This Senior Principal Data Security Engineer role guides, defines, and implements the overarching technical data protection strategies and partners across multiple functions as a trusted leader to champion and implement leading data security solutions. You will collaborate with other leaders to shape data security strategies across Autodesk and serves a diverse audience that includes developers and end-users. You will play a crucial role in ensuring that Autodesk's systems and services meet the highest data security standards and align with our industry-leading practices and regulatory requirements. We ask that you have expertise in data security, security engineering, and cloud security that will safeguard data across Autodesk.

This is a hybrid position in Bengaluru, India. You will report to the Senior Manager, Data Security Engineering.

Responsibilities

• Design, implement, and operationalize solutions to ensure the data security of infrastructure, applications, and systems, including the selection and deployment of cybersecurity technologies.
• Oversee data security throughout the entire lifecycle of infrastructure and services, from design to runtime.
• Create and establish data security standards, best practices, and assurance processes.
• Build a comprehensive data catalog and implement data governance strategies.
• Collaborate with Technical Program Managers (TPMs) and influence users to define and prioritize backlog related to data protection efforts.
• Ensure the data security strategy is aligned with business objectives and reviewed for effectiveness.
• Lead efforts to mature capabilities for data classification and inventory, strengthen security baselines for data protection and handling, and ensure solutions meet rigorous data security and compliance requirements.
• Research new services and emerging technologies that will further enhance the data security capabilities.
• Establish security metrics and define Key Performance Indicators (KPIs) for data protection programs.

Minimum Qualifications

• Bachelor's degree in computer science, information security, or a related field (master's degree preferred).
• 10+ years of experience in information security with a focus on hands-on security engineering, data protection, enterprise security, cloud security, and solutions architecture.
• Data Protection Solutions: Proficiency in designing data protection solutions, such as data security posture management (DSPM), data loss prevention (DLP) systems, encryption technologies, and data masking/anonymization techniques.
• Familiarity with industry-standard data protection frameworks and best practices.
• Identity and Access Management (IAM): In-depth knowledge of IAM principles, including user provisioning, authentication, authorization, and privilege management. Hands-on experience with IAM technologies, such as LDAP, Active Directory, or identity federation protocols (e.g., SAML, OAuth).
• Cloud Security: Proficiency in cloud security and experience with cloud service providers (e.g., AWS, Azure, Google Cloud, O365) and SaaS Data Security, knowledge of secure cloud architecture design, cloud data protection mechanisms, and cloud identity and access management (IAM).
• Programming and Scripting Experience: (Python, PowerShell, Shell Scripting, Ruby, Go).
• Requires a mixture of security and solutions engineering to create and develop systems and services to operationalize data protection technologies.
• Excel where success hinges on collaborating with multiple partners and aligning teams in making security decisions and implementing solutions.

Key skills/competency

• Data Security Posture Management (DSPM)
• Data Loss Prevention (DLP)
• Encryption Technologies
• Data Masking/Anonymization
• Identity and Access Management (IAM)
• Cloud Security (AWS, Azure, Google Cloud, O365)
• Secure Cloud Architecture
• Data Classification and Inventory
• Python Programming
• Security Engineering