Senior Security Engineer

Apple•Seattle, WA

19h

About The Position

Apple Services Engineering (ASE), the team behind iCloud services and its supporting infrastructure, is seeking a Senior Security Engineer to partner with engineering teams developing new products and features. The role collaborates with developers, site reliability engineers, and security teams to protect ASE services and design secure platforms and services at Apple. It leads early security work through threat modeling and security guidance, working with security engineering, privacy, and offensive security partners to help keep Apple services secure. The Senior Security Engineer serves as the primary security point of contact for several large engineering efforts and works with teams throughout the development lifecycle. The engineer conducts security reviews, develops threat models, and uses engagement insights to build scalable methodologies. The role helps define, automate, and advocate for platform-wide security improvements, and partners with colleagues to raise security standards across engineering teams. As a technical lead responsible for the security of Apple's internet-facing services and backend infrastructure, this person identifies weaknesses and improvement opportunities, sets appropriate security goals, builds relationships to drive improvements, guides workable secure designs and risk decisions, keeps current on security technologies and vulnerabilities, develops proof-of-concept systems to automate recommendations and workflows, and uses data to improve review efficiency and prioritize high-value engagement. The role includes making security decisions that affect millions of users.

Requirements

At least 10 years conducting security reviews, threat modeling, tracking findings, and communicating risk to engineering teams and leadership.
Knowledge of distributed systems design patterns and their security implications when developing cloud-scale platform services.
Deep understanding of cloud-native architecture and managed platform services, such as compute, storage, networking, and databases.
Experience designing multi-tenant systems and securing multi-tenant software-as-a-service and platform-as-a-service offerings.
Conversant in at least one programming language, such as Python, Java, Go, or Swift.
Experience with security standard processes in third-party cloud environments.

Nice To Haves

Bachelor's degree or equivalent experience.
Community contributions such as public CVEs, bug bounty recognition, open-source tools, or blogs.
Experience securing container orchestration systems such as Kubernetes and understanding their security implications in multi-tenant environments.
Experience with artificial intelligence and machine learning.

Responsibilities

Serve as the primary security team point of contact for several large engineering efforts.
Work with engineering teams throughout their development lifecycle.
Conduct security reviews and develop threat models.
Use engagement insights to build scalable security methodologies.
Define, automate, and advocate for platform-wide security improvements.
Partner with engineering, security engineering, privacy, and offensive security teams to improve security.
Identify system weaknesses and opportunities for improvement, and establish appropriate security goals.
Guide partner teams toward workable secure designs and informed risk decisions.
Develop proof-of-concept systems to automate security recommendations, vulnerability discovery, and process workflows.
Use data to improve security review efficiency and prioritize high-value security engagement.
Make security decisions affecting Apple's internet-facing services, backend infrastructure, and millions of users.