Senior Security Engineer - Strategic Risk

Apple • Seattle, WA

9d

About The Position

The Apple Services Engineering Security team builds and provides secure systems and infrastructure for Apple services, including iCloud, iTunes, Siri, App Store, and Maps. This role helps manage security needs across Apple’s services and builds and integrates security controls, guardrails, and frameworks to protect customer data in Apple’s infrastructure and address security risks to Apple systems and data.

The Senior Security Engineer serves as the primary security team point of contact for several large engineering efforts and works with engineering teams throughout the development lifecycle. The role conducts security reviews, post-incident reviews, and threat modeling, then uses insights from these engagements to build scalable methodologies. It also helps define, automate, and advocate for application-level and platform-wide security improvements, with a focus on risks to customer accounts and data. The engineer takes a hands-on role in ensuring programs are appropriately reviewed, adjusted, implemented, and tested.

Requirements

• At least 7 years conducting security reviews, incident response, threat modeling, or security engineering.
• Demonstrated ability to design, document, and implement new security processes.
• Understanding of cloud-native architecture and managed platform services, such as compute, storage, networking, and databases.
• Expertise in threat modeling, operational threat intelligence, common attack vectors, and frameworks.
• Understanding of applied cryptography, access control, modern authentication frameworks, and other security mechanisms.
• Experience with enterprise log collection and analysis platforms such as Splunk or OSQuery.

Nice To Haves

• Experience with threat hunting, insider risk, and/or investigations.
• Experience working with data engineers to define metrics and interpret results from detection and risk models.
• Experience applying and experimenting with AI/ML to solve security-related use cases.

Responsibilities

• Serve as the primary security team point of contact for several large engineering efforts.
• Work with engineering teams throughout their development lifecycle.
• Conduct security reviews and post-incident reviews.
• Develop threat models and use engagement insights to build scalable methodologies.
• Help define, automate, and advocate for application-level and platform-wide security improvements focused on risks to customer accounts and data.
• Ensure programs are reviewed, adjusted, implemented, and tested appropriately.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed