19 hours ago
Responsibilities
- Conduct threat modeling, security assessments, and penetration testing for build infrastructure and software supply chain components.
- Develop technical security solutions and controls to strengthen Apple’s build infrastructure security posture.
- Partner with engineering teams to define and uphold security requirements and standards.
- Identify and drive remediation of vulnerabilities in complex software environments.
- Document technical findings, present results to varied audiences, mentor teammates, and monitor the evolving threat landscape.
Requirements
- At least 3 years of cybersecurity experience with hands-on experience in threat modeling, security assessments, or penetration testing.
- Experience in a software engineering or security operations role.
- Experience with scripting or programming languages such as Python or Bash.
- Experience collaborating with engineering teams on security requirements or controls.
- Preferred experience includes penetration testing or red team exercises targeting build pipelines or software supply chain components, safely leveraging LLMs, Kubernetes, Go, Perl, and cybersecurity frameworks such as NIST, CIS, or SLSA.
- Preferred qualifications also include vulnerability remediation experience, mentoring experience, strong written and verbal communication skills, and security certifications such as OSCP or CISSP.
Tech Stack
Categories
About Apple
Apple designs and sells consumer electronics, software, and services for consumers and professionals worldwide, including iPhone, Mac, iPad, Apple Watch, and AirPods, plus platforms like iOS/macOS and services such as the App Store, iCloud, Music, and TV+. Its business combines device sales with services and subscriptions and in-house silicon design. Founded in 1976, Apple is headquartered in Cupertino, California, and trades on NASDAQ as AAPL.