Sr Security Operations (SecOps) Engineer

Apple • Austin, TX

1d

About The Position

Apple is seeking an experienced Senior Security Operations (SecOps) Engineer to help define and drive security strategy for applications, cloud infrastructure, and engineering platforms. The role focuses on building and integrating reusable security platforms, automation, and intelligent controls that make security proactive and scalable as software and AI-enabled systems evolve. The engineer will serve as a senior technical security partner to application engineering, DevOps, Site Reliability Engineering, platform engineering, and Apple Information Security teams. Sales and Operations Engineering, part of IS&T, drives technology behind Apple’s global operations, sales, and supply chain, connecting systems that move products from factory to customer and aligning technology with business priorities.

The engineer will lead complex security assessments and threat modeling, define scalable security controls, influence application and infrastructure architecture, and develop automation to embed security throughout the software development lifecycle. The role identifies systemic risks and creates engineering solutions that improve security across multiple applications and teams. It also connects security signals to application ownership, business context, and engineering workflows so teams can prioritize and remediate important risks. The engineer combines security expertise with software, cloud, and infrastructure engineering experience, and evaluates responsible uses of AI-assisted and agentic workflows for security analysis, detection, triage, and remediation while helping teams manage risks introduced by AI-enabled applications and agents.

Requirements

• At least 8 years of experience in security engineering, application security, cloud security, DevSecOps, infrastructure security, security operations, or a related engineering discipline.
• At least 8 years of experience leading security reviews, threat modeling, risk assessments, and remediation of complex distributed or cloud-native systems.
• At least 8 years of experience in application security, cloud security, identity and access management, network security, vulnerability management, and secure software development.
• At least 5 years of experience securing production environments in AWS, GCP, or another major cloud platform.
• At least 5 years of programming or automation experience, such as Python, Go, or Java, including building integrations, services, or repeatable engineering workflows.
• At least 5 years of experience integrating security capabilities into CI/CD, developer workflows, infrastructure-as-code, or production engineering systems.
• Bachelor’s degree in Computer Science or equivalent experience.

Nice To Haves

• Experience securing cloud-native applications and workloads, including Kubernetes, containers, APIs, and modern distributed architectures.
• Strong experience integrating security controls into CI/CD pipelines and infrastructure-as-code workflows.
• Practical experience integrating or operating security testing and posture capabilities such as SAST, DAST, SCA, secrets scanning, container security, or CSPM, with judgment about appropriate controls for different workflows.
• Demonstrated experience designing or developing security automation using Python, Go, Java, Bash, or another programming language.
• Experience building APIs or integrations across security and engineering systems.
• Experience leading vulnerability assessment, prioritization, remediation, and risk-management activities across multiple engineering teams.
• Ability to translate complex technical security risks into actionable recommendations for engineers, managers, and senior leadership.
• Demonstrated ability to influence architecture and security outcomes across multiple engineering organizations.
• Experience building or integrating reusable security controls, automation, or self-service capabilities adopted by more than one team.
• Ability to take an ambiguous security problem from design through a working, maintainable technical solution.
• Experience participating in or leading security incident response, investigation, root cause analysis, and preventative remediation.
• Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, Information Security, or equivalent practical experience.
• Advanced Kubernetes or multi-tenant cloud security experience.
• Experience identifying security enforcement opportunities within Terraform, CloudFormation, CI/CD systems, Kubernetes admission controls, or similar platforms.
• Strong knowledge of threat modeling methodologies, offensive security techniques, application penetration testing, and secure architecture principles.
• Experience with security tooling and platforms for vulnerability management, SAST/DAST, secrets management, runtime security, SIEM, and cloud security.
• Experience with Splunk, OpenSearch, Prometheus, Grafana, or similar observability and security analytics technologies.
• Understanding of software supply-chain security, SBOM, artifact signing, provenance, dependency security, and secure build pipelines.
• Experience designing security metrics, risk scoring models, dashboards, and executive-level security reporting.
• Experience securing AI/ML workloads, LLM applications, model pipelines, or agent-based systems.
• Experience building or directing the use of AI/ML or agentic security tooling to scale security assessment, vulnerability analysis, incident investigation, or remediation.
• Contributions to the broader security community through security research, CVEs, bug-bounty findings, open-source projects, conference presentations, or technical publications.
• Relevant security certifications such as CISSP, CCSP, or CSSLP; certifications are a plus but do not substitute for hands-on engineering experience.

Responsibilities

• Lead complex security assessments, threat modeling, risk assessments, and remediation for distributed and cloud-native systems.
• Define scalable security controls and influence application and infrastructure architecture.
• Develop automation and integrations that embed security throughout the software development lifecycle.
• Identify systemic security risks and build engineering solutions that improve security across multiple applications and teams.
• Connect security signals to application ownership, business context, and engineering workflows to help teams prioritize and remediate risks.
• Partner technically with application engineering, DevOps, Site Reliability Engineering, platform engineering, and Apple Information Security teams.
• Evaluate responsible applications of AI-assisted and agentic workflows to improve security analysis, detection, triage, and remediation.
• Help teams manage security risks introduced by AI-enabled applications and agents.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior