Senior Security Developer Tools Engineer (Static Analysis)

About the position

Apple’s static program analysis tools help millions of developers inside and outside of Apple find, fix, and prevent security and stability bugs. We are looking for a senior engineer with a strong background in compilers or static analysis tooling to help lead the technical planning, design, and implementation of static bug-finding tools. This role will involve developing compiler- and OS-assisted program analysis features, mentoring engineers, and partnering with operating system and security teams to improve the security and reliability of software in the Apple ecosystem. We value communication skills, integrity, creativity, and aspire to build diverse, balanced and dynamic teams.

Responsibilities

• Act as a technical lead for a team of static analysis engineers who develop bug-finding and security tools.
• Collaborate closely with operating systems and security engineers to improve the security and stability of C, C++, Objective-C, and Swift codebases.
• Help develop and execute on a technical roadmap to build program analysis tools.
• Work with cross-functional teams to design, plan, and deliver high-quality software features.
• Mentor junior engineers to strengthen the team.
• Grow strong connections to the Clang/LLVM community and represent Apple in open source.
• Develop new program analysis tools and checks by driving feature planning, design, implementation and roll out strategy.
• Foster collaboration with IDE and CI teams as well as teams across Apple to help formulate priorities and set goals.

Requirements

• Experience developing compiler or static analysis tools.
• Experience leading the technical development of large features and collaborating across organizational boundaries.
• Proficiency in C++ development.
• Interest in systems-level programming and security.

Nice-to-haves

• Strong communication and organizational skills.
• Excellent software engineering, testing, and debugging ability.
• Experience with static analysis techniques (data flow analysis, abstract interpretation, or symbolic execution) is a plus.