Security Domain Expert, Perimeter and Network Security, Enterprise Technology Services

Apple • Sunnyvale, CA

7d

About The Position

Apple’s Emerging Technologies team within IS&T builds scalable systems and solutions in information security and reusable integration and orchestration platforms. The team operates with a startup mindset, using lean teams, high ownership, and technical leaders who work across domains.

The Security Domain Expert serves as the technical authority and outward-facing representative for Apple’s perimeter and network security platform. The role brings deep expertise in perimeter security, proxy technologies, and threat mitigation to architecture forums, security reviews, leadership briefings, and other cross-organizational engagements. It advises partner teams on how the platform’s capabilities address traffic and security needs, and works directly with application teams to understand requirements and develop integrated solutions.

The role also connects the engineering team with the broader Apple ecosystem by synthesizing cross-team needs to inform platform strategy and roadmap, and by translating technical security concepts into clear communications for leadership. It combines hands-on technical engagement with security and infrastructure teams with executive communication.

Requirements

• Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, or an equivalent technical discipline.
• 12+ years of experience in security engineering or security architecture, with a strong hands-on technical foundation.
• Deep expertise in perimeter and network security, including WAF design, DDoS mitigation strategies, bot detection techniques, TLS/mTLS, TCP/IP, HTTP/HTTPS, and DNS security.
• Strong understanding of proxy technologies such as NGINX, Envoy, and HAProxy across edge, origin, service mesh, and API gateway tiers, including implementation and enforcement of security controls at the proxy layer.
• Experience with security policy enforcement and configuration management across distributed infrastructure at scale.
• Familiarity with systems spanning on-premises data centers and public cloud environments such as GCP and AWS.
• Proven experience representing a security team as a domain authority in architecture reviews, security forums, executive briefings, and cross-organizational planning.
• Experience working directly with application and infrastructure teams to understand traffic and security requirements and design integrated solutions.
• Ability to communicate complex security topics clearly to engineers and senior leadership.
• Track record of influencing security direction and outcomes across organizational boundaries without direct management authority.
• Excellent written and verbal communication skills.

Nice To Haves

• M.S. in Computer Science, Computer Engineering, Cybersecurity, or Information Security.
• Experience with proxy engine internals, including C, C++, Lua, or WASM-based customization of NGINX, Envoy, or similar engines to implement security controls in the runtime data path.
• Experience with L4/L7 proxy architectures, protocol-level security, and load-balancing strategies.
• Understanding of orchestration and control-plane systems for security policy distribution and lifecycle management at fleet scale.
• Familiarity with OWASP threat models, CVE analysis, threat landscape trends, and engineering-focused security incident response.
• Experience with service mesh architectures such as Istio or Envoy-based systems, API and AI security gateway patterns, and containerization technologies such as Kubernetes and Docker.
• Knowledge of real-time threat intelligence distribution and event-driven security telemetry at scale.
• Recognized security-community contributions, such as conference talks, published research, open-source contributions, or patents.

Responsibilities

• Represent the perimeter and network security platform as its technical authority in architecture forums, security reviews, leadership briefings, and cross-organizational forums.
• Advise partner teams on how platform security capabilities address their traffic and security challenges.
• Apply expertise in proxies, origin and edge systems, application load balancers, service mesh, API and AI security gateways, WAF, DDoS mitigation, bot prevention, TLS termination and origination, and security policy enforcement across TCP, UDP, HTTP, and HTTPS.
• Work directly with application and infrastructure teams to understand traffic and security requirements and design integrated solutions.
• Synthesize cross-team needs to inform platform strategy and roadmap.
• Translate technical security concepts into clear narratives for leadership.
• Influence security direction and outcomes across organizational boundaries without direct management authority.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior