Senior Security Engineer - Security Assurance Scaling

Apple Services Engineering (ASE) is building and operating services at scale, and security assurance is a core part of that work. In this role, you will partner with engineering teams to protect ASE services and help establish a secure foundation through risk assessments, threat modeling, standards, and consistent control enforcement.

Based in Seattle, WA with onsite work expectations, this Senior Security Engineer position focuses on scaling assurance activities across the organization and acting as a technical lead for the security of Apple’s internet-facing services and backend infrastructure.

What you’ll do

• Partner with infrastructure and application teams to identify where security standards and security controls should be applied across the ASE organization.
• Work with engineering teams across the development lifecycle to conduct security reviews and develop threat models, then use those insights to build standard methodologies.
• Help prioritize which security capabilities and controls should be applied, working with the security engineering team and other platform teams to ensure enforcement.
• Define, prioritize, and advocate for platform-wide security improvements to raise the security bar for engineering teams across Apple.
• Serve as a technical lead responsible for the security of Apple’s internet-facing services and backend infrastructure.
• Identify opportunities for automated enforcement and collaborate with security and platform engineering teams to implement them.
• Use data to improve security review efficiency and focus high-value engagement from the security team.
• Conduct security risk assessments, threat modeling, and develop security standards.

Requirements

• 8+ years conducting security reviews, threat modeling, tracking findings, and communicating risk to engineering and leadership.
• Hands-on experience in cloud security engineering, with demonstrated expertise securing at least one major cloud platform (AWS, GCP, or AliCloud) in production environments.
• Experience securing cloud-native applications and workloads, including containerized environments (Kubernetes, EKS, GKE), serverless architectures (Lambda, Cloud Functions), and modern CI/CD pipelines.
• Experience building, evaluating, or directing AI/ML-based security tooling to scale secure design review capacity, with a demonstrated ability to recognize and act on automation opportunities.
• Conversant in at least one programming language such as Python, Java, Go, or Swift.
• Bachelor’s degree or equivalent experience preferred.

Preferred qualifications

• Experience identifying and prioritizing security enforcement points within infrastructure-as-code (for example, Terraform, CloudFormation, Pulumi) and CI/CD pipelines, partnering with platform/security engineering teams to embed controls consistently rather than relying on manual, one-off reviews.
• Familiarity with policy-as-code approaches (for example, Open Policy Agent, Sentinel, Checkov) sufficient to define control requirements and evaluate proposed implementations for coverage and risk reduction, even if not personally authoring policy code.

Technologies

• AWS, GCP, AliCloud
• Kubernetes, EKS, GKE
• Lambda, Cloud Functions
• CI/CD pipelines
• Python, Java, Go, Swift
• AI/ML-based security tooling
• Terraform, CloudFormation, Pulumi
• Open Policy Agent, Sentinel, Checkov
• infrastructure-as-code, policy-as-code

Compensation

USD 175,000 - 308,500 per year.

Benefits

• Comprehensive medical and dental coverage
• Retirement benefits
• A range of discounted products and free services
• Reimbursement for certain educational expenses, including tuition
• Opportunity to become an Apple shareholder through participation in Apple’s discretionary employee stock programs
• Eligible for discretionary restricted stock unit awards
• Can purchase Apple stock at a discount if voluntarily participating in the Apple Employee Stock Purchase Plan
• Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation
• Learn more about Apple Benefits

Minimum qualifications

• 8+ years conducting security reviews, threat modeling, tracking findings, and communicating risk to engineering and leadership
• Hands-on experience in cloud security engineering with demonstrated expertise securing at least one major cloud platform (AWS, GCP, or AliCloud) in production environments
• Experience securing cloud-native applications and workloads, including containerized environments (Kubernetes/EKS/GKE), serverless architectures (Lambda/Cloud Functions), and modern CI/CD pipelines
• Experience building, evaluating or directing the use of AI/ML-based security tooling to scale secure design review capacity, demonstrating the ability to recognize and act on automation opportunities
• Conversant in at least one programming language such as Python, Java, Go, or Swift