Sr Security Operations (SecOps) Engineer

Apple•Austin, TX

About The Position

Sales and Operations Engineering is part of IS&T and drives the technology behind Apple’s global operations, sales, and supply chain. The team connects systems that move products from factory to customer, bridging sales platforms with operational infrastructure and aligning Apple’s technology and business priorities. The Senior Security Operations (SecOps) Engineer defines and drives security strategy for applications, cloud infrastructure, and engineering platforms. This hands-on role builds and integrates reusable security platforms, automation, and intelligent controls to make security proactive and scalable as software and AI-enabled systems evolve. The engineer serves as a senior technical security partner to application engineering, DevOps, Site Reliability Engineering, platform engineering, and Apple Information Security teams. The role leads complex security assessments and threat modeling, defines scalable controls, influences application and infrastructure architecture, and develops automation that embeds security throughout the software development lifecycle. It focuses on identifying systemic risks and creating engineering solutions that improve security across multiple applications and teams. The engineer connects security signals with application ownership, business context, and engineering workflows to help teams prioritize and remediate meaningful risks. The role also evaluates responsible uses of AI-assisted and agentic workflows for security analysis, detection, triage, and remediation, while helping teams manage risks introduced by AI-enabled applications and agents. It includes hands-on implementation of selected integrations and production-quality security automation, alongside technical guidance and cross-organizational influence.

Requirements

8+ years of experience in security engineering, application security, cloud security, DevSecOps, infrastructure security, security operations, or a related engineering discipline.
8+ years of experience leading security reviews, threat modeling, risk assessments, and remediation for complex distributed or cloud-native systems.
8+ years of experience in application security, cloud security, identity and access management, network security, vulnerability management, and secure software development.
5+ years of experience securing production environments in AWS, GCP, or another major cloud platform.
5+ years of programming or automation experience, for example in Python, Go, or Java, including building integrations, services, or repeatable engineering workflows.
5+ years of experience integrating security capabilities into at least one of CI/CD, developer workflows, infrastructure-as-code, or production engineering systems.
Bachelor’s degree in Computer Science or equivalent experience.
Experience securing cloud-native applications and workloads, including Kubernetes, containers, APIs, and modern distributed architectures.
Strong experience integrating security controls into CI/CD pipelines and infrastructure-as-code workflows.
Practical experience integrating or operating several security testing and posture capabilities, such as SAST, DAST, SCA, secrets scanning, container security, or CSPM, and judgment about which controls fit different workflows.
Demonstrated experience designing or developing security automation using Python, Go, Java, Bash, or another programming language.
Experience building APIs or integrations across security and engineering systems is particularly valuable.
Experience leading vulnerability assessment, prioritization, remediation, and risk-management activities across multiple engineering teams.
Ability to translate complex technical security risks into actionable recommendations for engineers, managers, and senior leadership.
Demonstrated ability to influence architecture and security outcomes across multiple engineering organizations.
Experience building or integrating reusable security controls, automation, or self-service capabilities adopted by more than one team.
Ability to take an ambiguous security problem from design through a working, maintainable technical solution.
Experience participating in or leading security incident response, investigation, root cause analysis, and preventative remediation.

Nice To Haves

Advanced Kubernetes or multi-tenant cloud security experience.
Experience identifying security enforcement opportunities within Terraform, CloudFormation, CI/CD systems, Kubernetes admission controls, or similar platforms.
Strong knowledge of threat modeling methodologies, offensive security techniques, application penetration testing, and secure architecture principles.
Experience with security tooling and platforms for vulnerability management, SAST/DAST, secrets management, runtime security, SIEM, and cloud security.
Experience with Splunk, OpenSearch, Prometheus, Grafana, or similar observability and security analytics technologies.
Understanding of software supply-chain security, SBOM, artifact signing, provenance, dependency security, and secure build pipelines.
Experience designing security metrics, risk-scoring models, dashboards, and executive-level security reporting.
Experience securing AI/ML workloads, LLM applications, model pipelines, or agent-based systems.
Experience building or directing the use of AI/ML or agentic security tooling to scale security assessment, vulnerability analysis, incident investigation, or remediation.
Contributions to the broader security community through security research, CVEs, bug-bounty findings, open-source projects, conference presentations, or technical publications.
Relevant security certifications, such as CISSP, CCSP, or CSSLP; certifications are a plus but do not substitute for hands-on engineering experience.
Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, or Information Security, or equivalent practical experience.

Responsibilities

Lead security architecture reviews, threat modeling, and risk assessments for complex applications, platforms, cloud environments, and distributed systems.
Serve as a senior technical security advisor to application engineering, DevOps, SRE, platform engineering, and leadership teams.
Define security architecture patterns, engineering standards, reusable controls, and guardrails for adoption across engineering organizations.
Identify security enforcement points across CI/CD pipelines, infrastructure-as-code, cloud platforms, Kubernetes, APIs, and application architectures.
Design and drive scalable DevSecOps capabilities, including SAST, DAST, software composition analysis, container security, secrets scanning, supply-chain security, and policy enforcement.
Lead vulnerability management strategy, including discovery, risk prioritization, remediation guidance, exception management, and executive-level reporting.
Correlate vulnerability findings with exploitability, asset exposure, application criticality, and ownership where practical to support actionable prioritization.
Partner with incident-response and Information Security teams on significant incidents, including containment, remediation, root cause analysis, and preventative controls.
Develop or guide development of security tooling, automation, and services using Python, Go, APIs, infrastructure-as-code, or similar technologies.
Personally implement selected integrations and production-quality security automation.
Replace manual security processes with automated controls and self-service security capabilities where possible.
Evaluate security architecture for AWS/GCP services, Kubernetes platforms, containerized workloads, networking, IAM, secrets management, and multi-tenant systems.
Partner with engineering teams early in product and system design to identify risks before deployment.
Establish security metrics and risk indicators that give leadership visibility into application and infrastructure security posture, emphasizing coverage, remediation time for critical exposures, control effectiveness, and measurable risk reduction.
Evaluate security technologies and lead technical proofs of concept and adoption decisions, favoring interoperability and maintainability over isolated tools.
Mentor engineers and improve security engineering expertise across SecOps, DevOps, SRE, and application engineering teams.
Influence security direction across organizational boundaries without requiring direct management authority.
Design, prototype, and selectively integrate AI-assisted or agentic capabilities for vulnerability analysis, security reviews, incident investigation, and remediation recommendations.
Evaluate AI-assisted capabilities for accuracy and operational value, using least-privilege access, auditability, and human approval for consequential actions.
Build integrations across source control, CI/CD, security scanners, asset inventories, observability, and engineering ticketing systems to turn fragmented findings into actionable workflows.
Help assess AI/LLM application and agent risks, including prompt injection, untrusted tool outputs, sensitive-data exposure, and excessive permissions, in collaboration with Information Security and application teams.