Director, Enterprise AI Security

Position Overview

Autodesk is seeking a strategic, hands-on security leader to serve as Director, Enterprise AI Security. In this role, you will help make workforce AI adoption secure by design by governing how AI tools, assistants, agents, and models are approved, deployed, monitored, and defended across endpoints, browsers, SaaS, and collaboration platforms.

You will lead engineering functions that deliver AI security where employees use AI, including device security, SaaS security, collaboration security, and security operations delivered with partners. You will lead a globally distributed organization of engineers, engineering leads, and managers, while partnering with leaders across identity, data security, threat management and response, IT, GRC, and Legal.

You will also model AI-enabled execution by building and scaling the skills, agents, and automation that change how a security team works.

The ideal candidate is an AI security practitioner first, with the engineering depth to put AI controls into production across endpoint, SaaS, and collaboration platforms. They have experience leading managers and senior engineers, and the discipline to measure what security controls actually do.

This role is remote-friendly within United States. For those who prefer in-office or hybrid work, the role can be based in San Francisco, CA; Portland, OR; Boston, MA; Denver, CO.

Travel requirements are approximately up to 25%.

In accordance with U.S. government contracting and FedRAMP compliance obligations, this role requires U.S. citizenship or U.S. lawful permanent residency. Employment is contingent upon meeting all applicable government security and eligibility requirements.

Responsibilities

Enterprise AI Security

• Strategy: Set the multi-year strategy, reference architecture, and roadmap for securing workforce and enterprise AI use. Align the work with the NIST AI Risk Management Framework, NIST CSF 2.0, and CISA AI guidance. Define acceptable-use guardrails and risk governance with Legal, Privacy, and GRC partners
• AI tool governance: Run a structured intake and qualification process so AI tools, assistants, and AI-enabled SaaS features are assessed, approved, inventoried, and assigned a named owner before use. Continuously assess AI SaaS posture, application permissions, and third-party AI integrations
• AI threat detection and response: Partner with threat management and response teams to establish coverage for AI-specific threats, including prompt injection, data exfiltration through AI tools, unsanctioned extensions and MCP servers, agent misuse, and shadow AI
• Endpoint and browser: Move the enterprise from blocking AI to governing it. Enable approved AI tools through managed delivery with telemetry, set secure browser and extension standards, and define controls for local models, MCP servers, and AI agents on managed devices
• Agentic AI: Define security standards for AI agents, MCP servers, plugins, and third-party models in partnership with identity teams
• Collaboration: Manage data exposure risk from AI assistants embedded in email, chat, and collaboration platforms. Defend against AI-generated phishing, deepfakes, and business email compromise attacks
• Platform selection: Run proofs of concept, select and govern AI security platforms, and integrate them with existing endpoint, SaaS, and security operations tooling
• AI-enabled execution: Build and champion AI skills, agents, and automation that reduce toil in security work. Measure adoption and impact with privacy-preserving metrics, and set standards for responsible use

Security Foundations for AI

• Device security: Deliver a unified roadmap across endpoint detection and response, hardening, privilege management, application control, software delivery, and device lifecycle. Use telemetry to prove effective coverage, not just deployment, and establish risk-driven vulnerability and patch SLAs
• SaaS and collaboration security: Own SaaS posture management, inventory and ownership, misconfiguration remediation with application owners, email security, phishing defense, and collaboration platform governance

Organizational Leadership

• People: Lead, mentor, and develop managers, engineering leads, and senior engineers. Set clear, measurable priorities; manage performance and hiring; and build a rigorous, high-accountability, AI-forward engineering culture
• Operating model: Write multi-year strategies and annual plans sized to engineering capacity. Run regular priority reviews, measure key results, record trade-offs, and report program health, metrics, risks, and resourcing to senior leadership
• Budget and vendors: Manage the security tooling portfolio, including renewals, proofs of concept, tool selection, and managed service partners
• Compliance: Own control outcomes and audit evidence for applicable security and compliance frameworks. Prepare for emerging AI management standards such as ISO/IEC 42001, and drive remediation of findings from assessments and incident reviews

Minimum Qualifications

• 10+ years of experience in information security or security engineering, including at least 5 years leading managers and technical teams
• Hands-on experience securing enterprise generative AI adoption, such as AI tool governance, controlling AI use on endpoints and in browsers, AI SaaS posture management, or AI threat detection and response
• Deep understanding of AI-specific threats and controls, including prompt injection, data leakage through AI tools, model and AI supply chain risk, and agent and MCP security. Working knowledge of the OWASP Top 10 for LLM Applications and MITRE ATLAS
• Practical AI fluency: personally built or deployed AI-assisted workflows, LLM-based skills or agents, or automation that measurably improved team throughput; able to coach engineers to do the same
• Experience applying AI governance and security frameworks, including the NIST AI Risk Management Framework and NIST CSF 2.0, alongside standards such as SOC 2 and ISO 27001
• Security engineering depth in at least two of the following areas:
  • Endpoint security and management
  • SaaS security
  • Email or collaboration security

• Track record of leading large, cross-functional security programs with OKRs, milestones, capacity planning, and executive reporting
• Experience owning a security budget, vendor selection, contract renewals, and managed service provider relationships
• Working knowledge of enterprise identity, cloud, and collaboration platforms
• Proficiency or working knowledge of at least one scripting or programming language, such as Python, PowerShell, Shell, or Go
• Strong written and verbal communication, executive presence, and ability to translate AI risk into clear business decisions for senior executive and board audiences
• Data-driven mindset: measures whether controls work, not only whether they were deployed; operates autonomously in ambiguous, fast-moving environments

Preferred Qualifications

• Hands-on experience with AI security platforms, such as AI detection and response, AI security posture management, secure AI browsers, AI gateways, and DSPM
• Experience building AI agents and skills with modern AI assistants and agent frameworks, including MCP integrations with enterprise systems
• Experience with AI red teaming, adversarial machine learning, or AI incident response
• Familiarity with ISO/IEC 42001, CISA AI guidance, and emerging AI regulation such as the EU AI Act
• Hands-on experience with endpoint, SaaS, and email security platforms
• Experience delivering security controls in regulated or government cloud environments
• Experience leading teams through major security transformation programs
• Experience managing distributed teams that include contingent workers and managed service partners
• AIGP, CISSP, CISM, CCSP, or equivalent professional certification

The Ideal Candidate

• AI tools and AI-enabled features are governed through a consistent intake process with clear ownership
• AI-specific threats are detected and handled through established response workflows
• Security controls are measured by demonstrated effectiveness, with clear reporting to senior leadership
• The security organization uses AI skills and agents in daily work, with measured impact

About Autodesk

Welcome to Autodesk! Amazing things are created every day with our software – from the greenest buildings and cleanest cars to the smartest factories and biggest hit movies. We help innovators turn their ideas into reality, transforming not only how things are made, but what can be made.

We take great pride in our culture here at Autodesk – it’s at the core of everything we do. Our culture guides the way we work and treat each other, informs how we connect with customers and partners, and defines how we show up in the world.

When you’re an Autodesker, you can do meaningful work that helps build a better world designed and made for all. Ready to shape the world and your future? Join us!

Benefits

From health and financial benefits to time away and everyday wellness, we give Autodeskers the best, so they can do their best work. Learn more about our benefits in the U.S. by visiting https://benefits.autodesk.com/

Salary transparency

Equal Employment Opportunity

At Autodesk, we're building a diverse workplace and an inclusive culture to give more people the chance to imagine, design, and make a better world. Autodesk is proud to be an equal opportunity employer and considers all qualified applicants for employment without regard to race, color, religion, age, sex, sexual orientation, gender, gender identity, national origin, disability, veteran status or any other legally protected characteristic. We also consider for employment all qualified applicants regardless of criminal histories, consistent with applicable law.

Belonging

We take pride in cultivating a culture of belonging where everyone can thrive. Learn more here: https://www.autodesk.com/company/global-belonging

In-Person Onboarding and Identity Verification

This role may require in-person onboarding and/or in-person ID verification.