Build Security Engineer

Apple • Austin, TX

7h

About The Position

The Build Security Engineer helps protect the systems and infrastructure used to manage, build, and distribute Apple software. The role contributes to the security of Apple's software supply chain through threat modeling, offensive security assessments, and development of security controls. The engineer works closely with teams responsible for critical software infrastructure to uphold security standards and strengthen the security posture of Apple's build infrastructure end to end. The position also includes creating documentation, mentoring teammates, and monitoring the evolving threat landscape to address risk proactively.

Requirements

• At least 3 years of experience in cybersecurity, including hands-on experience in threat modeling, security assessments, or penetration testing.
• Experience in a software engineering or security operations role.
• Experience with scripting or programming languages such as Python or Bash.
• Experience working cross-functionally with engineering teams on security requirements or controls.

Nice To Haves

• Experience conducting penetration testing or red team exercises, particularly targeting build pipelines or software supply chain components.
• Experience safely leveraging LLMs to accelerate security workflows.
• Experience with container orchestration platforms such as Kubernetes.
• Proficiency in additional programming languages such as Go (Golang) or Perl.
• Familiarity with cybersecurity frameworks and standards such as NIST, CIS, or SLSA.
• Experience mentoring engineers or junior security team members on security concepts and best practices.
• Track record of identifying and driving remediation of vulnerabilities in complex software environments.
• Strong written and verbal communication skills, including presenting technical findings to varied audiences.
• Security certifications such as OSCP or CISSP.

Responsibilities

• Conduct threat modeling and security assessments of Apple's build infrastructure and software supply chain.
• Perform offensive security assessments and help develop security controls.
• Partner with engineering teams to uphold security standards and address security requirements.
• Develop technical solutions to strengthen the security of build infrastructure.
• Create security documentation.
• Mentor teammates on security concepts and practices.
• Stay current with the evolving threat landscape and proactively address risk.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed