Senior Security Engineer

As part of Apple Services Engineering (ASE), you will help safeguard iCloud services by shaping secure platforms and enabling engineering teams to build with security from the start. The role is based in Seattle, WA (onsite) and offers a USD 175,000 - 308,500 yearly salary.

Benefits

• Comprehensive medical and dental coverage
• Retirement benefits
• Discounted products and free services
• Reimbursement for certain educational expenses, including tuition
• Opportunity to become an Apple shareholder through participation in Apple’s discretionary employee stock programs
• Eligible for discretionary restricted stock unit awards
• Can purchase Apple stock at a discount through voluntary participation in Apple’s Employee Stock Purchase Plan
• Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation

What you’ll do

• Partner with engineering teams building new products and features to protect ASE services and design secure platforms and services at Apple
• Lead security implementation early in the design phase through threat modeling and security guidance
• Collaborate across security engineering, privacy, and offensive security to keep Apple services secure for users
• Act as the primary security point of contact for several large engineering efforts
• Support teams across the entire development lifecycle, including security reviews and threat model development
• Build scalable methodologies based on insights from security reviews and threat modeling engagements
• Help define, automate, and advocate for platform-wide security improvements
• Help raise the security bar for all engineering teams through partner collaboration
• Establish appropriate security goals and identify areas for improvement
• Use business acumen to guide partners toward workable secure designs and informed risk decisions
• Develop proof of concept systems to automate security recommendations, vulnerability discovery, and process workflows
• Use data to improve the efficiency of security reviews and prioritize high-value security engagement
• Make security decisions that impact millions of users
• Maintain relationships with partner teams to drive measurable security improvements
• Stay current on new security technologies, vulnerabilities, and methodologies

Requirements

• 6+ years conducting security reviews, threat modeling, tracking findings, and communicating risk to engineering and leadership
• Knowledge of distributed systems design patterns and their security implications for platform services at cloud scale
• Deep understanding of cloud-native architecture and managed platform services (compute, storage, networking, databases)
• Experience with multi-tenant system design, including securing multi-tenant software as a service and platform as a service offerings
• Conversant in at least one programming language: Python, Java, Go, or Swift
• Experience with security standard processes of third-party cloud environments

Technologies you may work with

• Python, Java, Go, Swift
• Kubernetes
• Artificial Intelligence, Machine Learning
• Cloud-native architecture

Preferred qualifications

• Bachelor’s Degree or equivalent experience preferred
• Bonus points for community contributions such as public CVEs, bug bounty recognition, open source tools, or blogs
• Experience securing container orchestration systems (for example, Kubernetes) and understanding security implications in multi-tenant environments
• Experience with Artificial Intelligence and Machine Learning is a plus