Senior Security Engineer

Apple is looking for a Senior Security Engineer to strengthen the security posture of critical applications and infrastructure. This onsite role in Austin supports security work across AI/ML systems and emerging technologies, with an emphasis on shifting security left across the AI application development lifecycle through assessments, threat modeling, and practical enablement for engineering teams.

What you’ll do

• Research emerging technologies, threats, and vulnerabilities to help define security requirements and controls before changes reach production.
• Perform hands-on security assessments of AI applications and infrastructure, including ML pipelines and agentic systems, identifying vulnerabilities and security risks across the AI/ML stack.
• Build techniques, tooling, and automation that enable and scale security assessments for AI applications and infrastructure.
• Collaborate with engineering teams to create tools and procedures that support early risk identification and remediation throughout the AI application development lifecycle.
• Promote assessment tools, security processes, and proven solutions across engineering teams to drive consistent adoption of AI security best practices.

What you bring

• Experience conducting security assessments of complex distributed systems, cloud-native applications, and large-scale infrastructure.
• Experience developing security requirements, threat models, or risk assessments for new and emerging technologies.
• Experience applying industry-leading security best practices to AI/ML solutions.
• Working knowledge of AI/ML concepts including model training pipelines, inference services, vector databases, agentic systems, and LLM-based applications.
• Understanding of common AI/ML security risks such as prompt injection, insecure tool use, data leakage, and supply chain vulnerabilities.
• Strong verbal and written communication skills, including the ability to explain security risk to technical and non-technical stakeholders.
• Education: BS in Computer Science, Computer Engineering, or Information Security, or 5+ years of equivalent hands-on experience.

Technologies you’ll work with

• AI/ML, ML pipelines, agentic systems, vector databases, LLM-based applications
• prompt injection, supply chain vulnerabilities, MCP (Model Context Protocol), A2A

Preferred qualifications

• Experience defining and implementing security requirements and controls for AI infrastructure, tooling, applications, and services.
• Experience developing security tooling or automation leveraging LLMs.
• Experience securing AI agents and emerging agentic protocols such as MCP or A2A.
• Experience with ML platforms and tooling.
• Proven track record securing enterprise platforms, cloud-based solutions, or privacy-focused systems.