Security Engineer - Developer Experience

Apple•Seattle, WA

22h

About The Position

The Apple Services Engineering Security team builds and provides secure systems and infrastructure for Apple services, including iCloud, Music, Siri, and the App Store. The Developer Experience Security Engineer helps engineers across Apple build secure software by bridging security guidance and engineering practice through documentation, automation, and learning resources. This highly collaborative, cross-functional role combines software development, technical writing, and strategic communication. The engineer owns resources that application, infrastructure, and platform engineers use to build securely, and helps teams adopt new practices, onboard to tooling, integrate security frameworks, and stay aligned as standards evolve. The role also develops Slack-based automation and LLM-assisted development resources, and plans communications that increase awareness and adoption of security practices, tools, and policy changes. The engineer partners with engineering leads and program managers and uses data and feedback to improve content and messaging.

Requirements

At least 7 years of experience in software engineering, developer experience, or technical writing.
Understanding of software build, deployment, and monitoring principles, including software supply chain engineering and SDLC practices.
Ability to write production-quality automation, including Slack workflows and integrations, and tools for issue and ticket lifecycle management.
Familiarity with LLM-assisted development tools and experience writing prompt instructions, skills files, or system prompts to shape model behavior for specific domains.
Ability to distill complex technical topics into clear, precise writing and reference documentation for engineering audiences, including FAQs, how-to guides, and onboarding materials.
Ability to work cross-functionally, designing and executing campaigns with engineering teams across diverse organizations to drive behavior.
Self-directed, able to make prioritization decisions, and able to manage multiple workstreams simultaneously.
Collaborative team player with strong listening skills, empathy, and a commitment to bringing out the best in peers.
Bachelor’s degree in Computer Science, Information Security, or a related technical field, or equivalent work experience.

Nice To Haves

Familiarity with application security principles, secure coding practices, software supply chain security, or developer-facing security tooling.
A portfolio or examples of technical documentation, automation scripts, or LLM skills files.

Responsibilities

Create and maintain security guidance, including FAQs, skills libraries, decision guides, and onboarding documentation spanning the full software development lifecycle.
Establish standards to keep security content accurate, discoverable, and aligned with evolving engineering practices.
Identify documentation gaps by analyzing inbound questions, support trends, and user requests, and feed insights into documentation and feature requests.
Design and build Slack-based automation to surface security guidance, route questions to appropriate resources, and reduce repetitive support work.
Author skills files and system-level instructions for LLM-assisted development tools that encode security best practices, including software supply chain security and secure SDLC practices.
Extend LLM-assisted content capabilities to writing, communications, and outreach.
Plan and execute targeted internal communications campaigns to increase awareness and adoption of security practices, tooling, and policy changes.
Adapt communication tone, format, and channel for different engineering audiences to maximize engagement.
Partner with engineering leads and program managers to coordinate rollout communications for new security requirements.
Use data and feedback to continuously refine messaging and content strategy.