About this role
At Apple, great ideas have a way of becoming extraordinary products, services, and customer experiences. Are you passionate building best-in-class cybersecurity services that empower engineering teams? Do you want to work in a highly energized and innovative environment where you work at the cutting edge of AI and Cybersecurity? If so, AI & Data Platforms org is looking for engineers like you!
You will be part of Apple’s security engineering team in a unique organization enabling secure AI platforms. You will be joining a team of highly-skilled and passionate security engineers working on this groundbreaking space. In this role you will conduct application security assessments, provide security guidance to engineering and build agentic capabilities to transform and accelerate security assurance.
This role is responsible for assessing platform and product security risks by conducting security architecture review and testing of modern application stack deployed on cloud. You will document detailed risk assessment and remediation guidelines for developers and business owners. You will help develop automated tooling leveraging AI to optimize security scanning and testing partnering closely with other security engineers.
Minimum Qualifications
Bachelors of Science in Computer Science, Cybersecurity or related engineering field
10 years of experience in security engineering, specializing in security testing of modern application technology stacks and designing and implementing preventive and detective security controls.
Experience with security testing of one or more public cloud services (e.g. AWS, GCP)
Proficient in Python with hands-on experience across Linux and macOS environments
Ability to explain basic networking concepts (routing, ACL, load balancers, SSL/TLS, TCP) in order to provide application architecture feedback
Background in web application development and/or code auditing
Preferred Qualifications
Experience with offensive and automation tool development
Experience with vulnerability scanning (SAST, DAST)
Experience leveraging AI/LLMs for security testing and automation
Experience with Kubernetes and container security
Experience with common authentication protocols
Knowledge of emerging security risks with AI technologies and mitigating controls
Ability to work independently and track record of leadership, innovation, responsibility, and creative thinking
Experience developing detailed security assessment reports and leading junior engineers and contractors
Experience leveraging and customizing open source projects
Knowledge of DevOps and CI/CD frameworks
Excellent verbal communications skills and ability to work effectively with multi-functional technical and business teams