Senior Security Engineering Manager

Apple • Seattle, WA

2d

About The Position

The Apple Services Engineering (ASE) Security team is looking for an experienced
manager to manage a team of security engineers focused on driving security
maturity for all of ASE. As a Senior Security Engineering Manager, you will
collaborate with developers, site reliability engineers, and security teams to
protect ASE services and design a secure foundation for services at Apple. Your
will build and lead a team of security engineers, set strategy, and lead
execution, ensuring our products and services are hardened against attackers.
You will play a pivotal role in shaping our security posture, and ensuring the
confidentiality, integrity, and availability of our systems and data. This role
is both strategic and hands-on, requiring deep technical expertise, strong
leadership, and a proven track record of managing and growing high-performing
security teams.

As a manager, you will partner closely with engineering leadership to align
security priorities with business objectives, advocate for security improvements
across the organization, and build scalable security programs that protect
Apple's services and our users. You will balance hands-on technical leadership
with people management, mentoring your team to deliver high-quality security
reviews while fostering their professional growth. You will work
cross-functionally with privacy, offensive security, and other security teams to
ensure a cohesive security posture across Apple's internet-facing services and
backend infrastructure.

Requirements

• 10+ years of experience in security engineering conducting hands-on security reviews, threat modeling, security architecture, and risk assessment for large-scale distributed systems and cloud services
• 6+ years of people management experience leading teams of security engineers, including responsibility for hiring, performance management, career development, and building high-performing technical teams
• Proven track record of building and scaling security programs, including developing security review methodologies, establishing metrics-driven processes, and implementing automation to improve team efficiency and coverage
• Strong experience partnering with engineering leadership to influence security strategy, communicate risk effectively to technical and non-technical audiences, and drive adoption of security improvements across large engineering organizations
• Experience with cloud-native architectures and modern development practices, including knowledge of containerization, orchestration systems, CI/CD pipelines, infrastructure-as-code, and third-party cloud platforms (AWS, GCP, Azure, or AliCloud)
• Demonstrated ability to manage competing priorities and make strategic trade-offs, balancing security rigor with business velocity while maintaining high security standards for services impacting millions of users
• Excellent verbal and written communication skills, with the ability to translate complex security concepts for technical and non-technical audiences

Nice To Haves

• Bachelors degree in Computer Science / Engineering with emphasis in security related fields (or equivalent experience)
• Certs like CISSP, OSCP, OSCE, OSEE, etc. are helpful but not vital
• Background in emerging technology security domains such as AI/ML security, privacy-preserving technologies, or zero-trust architectures, with ability to guide team members working in specialized or rapidly evolving security areas

What This Job Offers

• Job Type: Full-time
• Career Level: Manager