Senior Security Engineer - Security Assurance Scaling

Apple Services Engineering (ASE) is seeking a Senior Security Engineer to work closely with engineering teams to protect ASE services and to help design secure foundations for services at Apple. In this role, you will scale security assurance activities across the organization, including security risk assessments, threat modeling, and the development of security standards.

Based in Cupertino, CA (onsite), this position supports ASE teams that build and run infrastructure and services behind iCloud and Media.

What you’ll do

• Partner with infrastructure and application teams to identify where security standards and security controls should be applied across the ASE organization.
• Collaborate with engineering teams across the development lifecycle to conduct security reviews and develop threat models, then use those insights to build standard methodologies.
• Help prioritize which security capabilities and controls to apply, and work with the security engineering team and other platform teams to ensure enforcement.
• Define, prioritize, and advocate for platform-wide security improvements to raise the security bar for engineering teams across Apple.
• Bring a detail-oriented approach to understand system nuances and identify weaknesses.
• Identify opportunities for security improvement, establish security goals, and drive change through effective relationships with teams.
• Stay current on new security technologies, vulnerabilities, and methodologies.
• Find opportunities for automated enforcement and partner with security and platform engineering teams to implement them.
• Use data to improve security review efficiency and prioritize high-value engagement with security teams.
• Make security decisions that affect millions of users.

Minimum qualifications

• 8+ years conducting security reviews, threat modeling, tracking findings, and communicating risk to engineering and leadership.
• Hands-on experience in cloud security engineering, including demonstrated expertise securing at least one major cloud platform (AWS, GCP, or AliCloud) in production environments.
• Experience securing cloud-native applications and workloads, including containerized environments (Kubernetes/EKS/GKE), serverless architectures (Lambda/Cloud Functions), and modern CI/CD pipelines.
• Experience building, evaluating, or directing the use of AI/ML-based security tooling to scale secure design review capacity, including recognizing and acting on automation opportunities.
• Conversant in at least one programming language such as Python, Java, Go, or Swift.

Technologies you may work with

• AWS, GCP, AliCloud
• Kubernetes, EKS, GKE
• Lambda, Cloud Functions
• CI/CD
• AI/ML-based security tooling
• Python, Java, Go, Swift
• Terraform, CloudFormation, Pulumi
• Open Policy Agent, Sentinel, Checkov

Base pay and compensation

Apple Services Engineering base pay for this role is USD 184,700 to USD 324,800 per year, depending on skills, qualifications, experience, and location.

Benefits

• Comprehensive medical and dental coverage
• Retirement benefits
• Discounted products and free services
• Reimbursement for certain educational expenses, including tuition
• Discretionary bonuses or commission payments, as well as relocation
• Opportunity to become an Apple shareholder through Apple’s discretionary employee stock programs
• Eligible for discretionary restricted stock unit awards
• Ability to purchase Apple stock at a discount if voluntarily participating in Apple’s Employee Stock Purchase Plan