About The Position

The Detection team within Apple Services Engineering is responsible for finding threat actors attacking Apple systems and services. The team partners closely with engineering teams to understand their systems and the threats against them. It comprises an on-host detection and response agent team and a fleet-scale detection and response platform team. The platform fuses signals from hosts, applications, cloud control planes, and identity into high-confidence security findings, and applies agentic AI to detection, triage, response, and threat hunting. The Senior Manager will lead the fleet-scale platform team, manage experienced engineers, and work as a close peer with the manager of the on-host agent team. This is a technical, hands-on, builder-first role that also works with partner teams across Apple's security organization on delivery, platform dependencies, and operations. The manager will bring experience deploying autonomous GenAI workflows in detection and response. The position is intended to have a lasting impact on Apple's security posture and the security of its customers.

Requirements

  • 10+ years of experience managing engineering teams; this is not a first-time manager role.
  • 8+ years of professional experience building and shipping production software or data systems.
  • Technical credibility with senior individual contributors and the ability to challenge architecture decisions on equal footing.
  • Experience deploying standalone GenAI or agentic workflows to production that perform useful work in detection, response, threat hunting, or a closely related security or operations domain; candidates should be able to explain what the workflows did, who used them, and what changed as a result.
  • Deep domain experience in security detection and response, including attacker behavior, malicious activity in telemetry, and the process by which alerts become investigated and closed incidents.
  • Experience with large-scale security data and detection platforms, including pipelines, correlation, enrichment, and alert handling; this must not be a first experience with this work.

Nice To Haves

  • Experience with threat hunting.
  • Experience leading threat hunting or detection engineering teams and turning hunting results into improved detections.
  • Experience with Spark, Databricks, or similar large-scale data processing platforms, and streaming alert pipelines.
  • Experience designing automated or semi-automated response and containment.
  • Experience scaling a team through hiring, onboarding, and leveling while continuing to ship.
  • Experience managing a team that works closely with partner organizations responsible for related services, while keeping partnerships productive as priorities change.
  • Public contributions such as open-source work, talks, papers, or blog posts.
  • Business acumen to weigh the benefits of detection and automation against their costs and to perform security work in ways that preserve user privacy.

Responsibilities

  • Lead the fleet-scale detection and response platform team.
  • Manage, coach, and set a high performance bar for experienced engineers, addressing performance issues directly.
  • Work as a close peer with the manager of the on-host detection and response agent team.
  • Partner with teams across Apple's security organization on delivery, platform dependencies, and operations.
  • Apply experience deploying autonomous GenAI workflows to detection and response.
  • Set direction within an agreed strategy and drive priorities through to results.
© 2026 Teal Labs, Inc
Privacy PolicyTerms of Service