Senior Security Engineer

Apple • Cupertino, CA

4d

About The Position

We are seeking an experienced Security Engineer to play a pivotal role in
shaping the security posture of our most critical applications and
infrastructure - with a particular focus on AI/ML systems and emerging
technologies. In this high-impact role, you will lead sophisticated security
assessments, conduct comprehensive threat modeling, and drive security
requirements across our technology ecosystem - ensuring that rigorous security
is embedded from the ground up. You will develop repeatable methodologies for
evaluating complex systems and emerging technologies, and deliver clear,
actionable findings to engineering and business stakeholders. Beyond
assessments, you will serve as a strategic partner - influencing engineering
teams to build securely and championing a culture of proactive risk management.
Our scope spans all of Apple's application and infrastructure development, new
services and technologies, and organizational processes. Our team works
cross-functionally with other security teams and development teams, providing
security consulting and driving new security initiatives across one of the
fastest-moving technology environments.

DESCRIPTION

As a Senior Security Engineer in Apple Information Security, you will:
Research and identify emerging technologies, threats, and vulnerabilities to
proactively define security requirements and controls before they reach
production. Conduct hands-on security assessments of AI applications and
infrastructure, including ML pipelines and agentic systems, identifying
vulnerabilities and security risks across the full AI/ML stack. Develop
techniques, tooling, and automation to support and scale security assessments of
AI applications and infrastructure. Partner with engineering teams to develop
tools and procedures that shift security left in the AI application development
lifecycle, enabling teams to identify and remediate risks earlier. Evangelize
assessment tools, security processes, and proven solutions across engineering
teams, driving consistent adoption of security best practices for AI across the
organization.

Requirements

• Experience conducting security assessments of complex distributed systems, cloud-native applications, and large-scale infrastructure.
• Experience developing security requirements, threat models, or risk assessments for new and emerging technologies.
• Experience applying industry leading security best practices to AI/ML solutions.
• Working knowledge of AI/ML concepts including model training pipelines, inference services, vector databases, agentic systems, and LLM-based applications.
• Understanding of common AI/ML security risks including prompt injection, insecure tool use, data leakage, and supply chain vulnerabilities.
• Strong verbal and written communication skills, with the ability to convey security risk to both technical and non-technical stakeholders.
• BS in Computer Science, Computer Engineering, or Information Security, or 5+ years of equivalent hands-on experience.

Nice To Haves

• Experience defining and implementing security requirements and controls for AI infrastructure, tooling, applications, and services.
• Experience developing security tooling or automation leveraging LLMs.
• Experience securing AI agents and emerging agentic protocols such as MCP (Model Context Protocol) or A2A.
• Experience with ML platforms and tooling Proven track record securing enterprise platforms, cloud-based solutions, or privacy-focused systems.

Responsibilities

• Research and identify emerging technologies, threats, and vulnerabilities to proactively define security requirements and controls before they reach production.
• Conduct hands-on security assessments of AI applications and infrastructure, including ML pipelines and agentic systems, identifying vulnerabilities and security risks across the full AI/ML stack.
• Develop techniques, tooling, and automation to support and scale security assessments of AI applications and infrastructure.
• Partner with engineering teams to develop tools and procedures that shift security left in the AI application development lifecycle, enabling teams to identify and remediate risks earlier.
• Evangelize assessment tools, security processes, and proven solutions across engineering teams, driving consistent adoption of security best practices for AI across the organization.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees