AI Security Engineer - Red Team

Apple•Seattle, WA

About The Position

The Apple Services Engineering (ASE) Security Red Team conducts deep, focused technical security reviews of critical services and infrastructure. The AI Security Engineer leads reviews of critical, internet-scale AI deployments—including agents, MCPs, platforms, and supporting infrastructure—to identify meaningful security improvement opportunities. The role works closely with AI platform teams, security engineering, InfoSec, privacy, SRE, detection, and design review teams to help keep Apple services and AI agents secure. The engineer scopes reviews by learning each service’s AI architecture and risk profile, with attention to risks from AI models in use while keeping the model itself out of scope. They identify security weaknesses and complex risks that may escape agentic tools and processes, validate and design detection mechanisms, and provide actionable recommendations. The role also uses AI to expedite review work while remaining accountable for outcomes, and develops repeatable testing frameworks and metrics-driven improvements to security controls and detection capabilities.

Requirements

At least 6 years of experience in information security or software engineering.
At least 2 years conducting security reviews.
At least 1 year reviewing AI deployments such as MCPs and agents.
At least 2 years manually reviewing source code to help find vulnerabilities.
Experience building or contributing to AI tools or AI security tools.
Ability to adapt quickly to changing priorities and investigate unfamiliar technologies.
Extensive infrastructure, cloud, and application security experience.
Experience communicating risk to engineering and leadership teams.

Nice To Haves

At least 8 years of experience in information security.
At least 4 years conducting security reviews.
Bachelor’s degree in Computer Science, Engineering, or a related field, with an emphasis on security-related fields, or equivalent experience.
Ability to reason about and influence software architecture for security.
Community contributions such as public CVEs, bug bounty recognition, open-source tools, blogs, or talks.

Responsibilities

Scope and lead focused security reviews of critical, internet-scale AI deployments, including agents, MCPs, platforms, and supporting infrastructure.
Learn services’ AI architectures and risk profiles to define meaningful review scopes.
Focus reviews on risks related to AI models in use while keeping the model itself out of scope.
Identify security weaknesses and complex risks that may not be detected by agentic tools and processes.
Validate and design detection mechanisms.
Provide actionable security recommendations to improve the organization’s security posture.
Collaborate with AI architecture and engineering teams to validate and improve security controls and detection capabilities.
Develop repeatable testing frameworks and metrics-driven security improvements.
Use AI to expedite all stages of security review work while maintaining accountability for outcomes.
Communicate security risks to engineering and leadership teams.