Field Security Technical Engineer

Apple

8d

About The Position

This role supports an Apple security initiative to improve the security of Apple’s internal and supply-chain networks. The engineer will deliver network security systems in complex environments, combining technical expertise with cross-functional coordination. The role covers design, deployment, management, and support of security appliances—including firewalls, IPS/IDS, and remote-access infrastructure—in the China/APAC region. It also involves automation, incident response, vendor and project management, regional representation in technical discussions, and training and mentoring.

Requirements

• At least 5 years of relevant work experience at a multinational or major national company.
• Solid knowledge of computer networking and common protocols, including TCP/IP, the OSI model, UDP, DNS, SSH, SSL/TLS, and HTTPS.
• Knowledge of security technologies such as network and application firewalls, host intrusion prevention, and antivirus.
• Hands-on experience analyzing network traffic and using packet sniffers and Deep Packet Inspection tools.
• Programming proficiency sufficient to write and execute command-line scripts, such as in Python or Go.
• Experience with automation tools such as Ansible, SaltStack, and Puppet.
• Experience installing, configuring, and troubleshooting network routers, switches, firewalls, and VPN devices.
• Deep knowledge of operating-system mechanisms, including Darwin, FreeBSD, WinNT, and CE, and experience with Unix-like systems.
• Excellent verbal and written English communication and influencing skills.
• Strong paperwork and documentation skills, including the ability to translate complex ideas into clear written solutions.
• Thorough understanding of Content Delivery Networks and their application integration.
• Knowledge and experience with networking technologies including IPv6, Ethernet, VPLS, MPLS, ISDN, IPSec, VxLANs, HSRP, TCP/IP, OSPF, EIGRP, BGP, QoS, multicast, ACLs, VPNs, IP telephony, VoIP, and structured cabling.
• Experience using network management tools for performance tuning, troubleshooting, and capacity planning, such as Cisco PRIME, Concord eHealth, EtherPeek, InterMapper, MRTG, or Cacti.
• Leadership, creative thinking, learning agility, flexibility, and initiative.
• Ability to work in a virtual global or regional team across cultural, language, and time-zone differences.
• Ability to handle ambiguity and work independently with minimal supervision or guidance.
• Vendor management and negotiation skills.
• Project management, process management, problem-solving, and presentation skills.
• Bachelor’s degree or above in Computer Science, Information Security, or a related major.

Nice To Haves

• Team management experience is desirable.
• Preferred certifications include CISSP, CCSP, or CCIE Security.

Responsibilities

• Design, deploy, manage, and support security appliances across network environments, including firewalls, IPS/IDS, and remote-access infrastructure in China/APAC.
• Build programmable scripts to automate network operations and monitoring.
• Document technical proposals and plan internal and external knowledge transfer in alignment with SOPs.
• Act as the DRI for issues and queries from in-region production lines, providing prompt feedback to remote SRE, R&D, EPM, and HWTE teams.
• Participate in duty shifts for production network incidents and security issues.
• Manage project outcomes by working with business stakeholders and vendors to identify needs and provide solutions aligned with global standards.
• Represent Asia-Pacific in global and regional technical discussions and initiatives.
• Provide formal and informal training, consulting, and mentoring to vendors and team members as needed.
• Travel extensively as required.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior