3 hours ago
Responsibilities
- Design, write, ship, test, and operate production security services and features.
- Build scanning and assurance tooling, agentic and LLM-integrated components, backends, APIs, and developer workflow integrations.
- Develop software supply chain capabilities for dependency risk management, build and release integrity, artifact signing and verification, and policy-based runtime admission.
- Own significant components end to end and maintain software quality and service-level objectives.
- Partner with infrastructure, platform, product security, and internal customer teams.
- Participate in code and security reviews, research and prototype solutions, and present designs and results.
Requirements
- 13+ years of hands-on software engineering experience, including production ownership of non-trivial systems.
- Proficiency in at least two of Python, Go, and Java, with the ability to work across additional languages.
- Knowledge of software supply chain security, including dependency risk, build and release integrity, artifact signing and verification, attestation infrastructure, and policy-based admission.
- Production experience designing and operating agentic systems and LLM-integrated applications, including prompt engineering, orchestration, and model-output evaluation.
- Familiarity with static and dynamic application security analysis and their operational trade-offs.
- Experience designing and operating distributed backends, APIs, data pipelines, and services with uptime and performance requirements.
- Experience building and maintaining CI/CD pipelines and integrating security controls into them.
- Comfort operating in Linux and macOS and proficiency in a shell scripting language such as Bash.
- Understanding of the software development lifecycle, including building, testing, deploying, and monitoring production software.
- Preferred experience includes policy admission systems, threat modeling, taint analysis, program analysis, web and service-level vulnerabilities, model and service integration, full-stack engineering, containerization, container orchestration, cloud infrastructure, and gRPC.
- Bachelor’s degree in Computer Science or equivalent work experience in a related field.
About Apple
We’re a diverse collective of thinkers and doers, continually reimagining what’s possible to help us all do what we love in new ways. And the same innovation that goes into our products also applies to our practices — strengthening our commitment to leave the world better than we found it. This is where your work can make a difference in people’s lives. Including your own. Apple is an equal opportunity employer that is committed to inclusion and diversity. Visit apple.com/careers to learn more.