5 hours ago
Responsibilities
- Lead complex security assessments, threat modeling, risk assessments, and remediation for distributed and cloud-native systems.
- Define scalable security controls and influence application, infrastructure, and secure-system architecture.
- Build reusable security platforms, automation, integrations, services, and self-service capabilities adopted across multiple teams.
- Integrate security controls into developer workflows, infrastructure-as-code, production engineering systems, and software development processes.
- Connect security signals to application ownership, business context, and engineering workflows to prioritize meaningful risks.
- Support vulnerability management, security incident response, investigation, root-cause analysis, and preventative remediation.
- Evaluate AI-assisted and agentic workflows for security analysis, detection, triage, and remediation while addressing risks from AI-enabled applications and agents.
- Design security metrics, risk-scoring models, dashboards, and executive-level security reporting.
Requirements
- At least 8 years of experience in security engineering, application security, cloud security, DevSecOps, infrastructure security, security operations, or a related engineering discipline.
- At least 8 years of experience leading security reviews, threat modeling, risk assessments, and remediation for complex distributed or cloud-native systems.
- At least 8 years of experience in application security, cloud security, identity and access management, network security, vulnerability management, and secure software development.
- At least 5 years of experience securing production environments in AWS, GCP, or another major cloud platform.
- At least 5 years of programming or automation experience, including building integrations, services, or repeatable engineering workflows.
- At least 5 years of experience integrating security capabilities into CI/CD, developer workflows, infrastructure-as-code, or production engineering systems.
- Bachelor’s degree in Computer Science, Computer Engineering, Cybersecurity, Information Security, or equivalent experience.
- Experience with Kubernetes, containers, APIs, modern distributed architectures, security testing, posture management, vulnerability remediation, and security automation.
- Experience with Python, Go, Java, Bash, or another programming language and with building APIs or integrations across security and engineering systems.
- Experience securing AI/ML workloads, LLM applications, model pipelines, or agent-based systems is preferred.
- Relevant certifications such as CISSP, CCSP, or CSSLP are a plus but do not replace hands-on engineering experience.
- Security-community contributions such as security research, CVEs, bug-bounty findings, open-source projects, conference presentations, or technical publications are preferred.
Tech Stack
Categories
About Apple
Apple designs and sells consumer electronics, software, and services for consumers and professionals worldwide, including iPhone, Mac, iPad, Apple Watch, and AirPods, plus platforms like iOS/macOS and services such as the App Store, iCloud, Music, and TV+. Its business combines device sales with services and subscriptions and in-house silicon design. Founded in 1976, Apple is headquartered in Cupertino, California, and trades on NASDAQ as AAPL.