20 hours ago
Responsibilities
- Own the reliability, quality, performance, rollout safety, and operational excellence of Apple’s EDR agent.
- Lead incident response, post-mortems, corrective actions, and the development of a reliability learning culture.
- Partner with Security SRE, platform-specific SRE teams, and Tier 1, Tier 2, and Tier 3 support teams.
- Design tiered support and escalation models and develop support runbooks.
- Build and evolve endpoint, host, and agent software deployed across a very large fleet.
- Develop security telemetry collection, host-based detection, and response capabilities.
- Lead technical solutions for ambiguous, high-stakes systems and security problems.
Requirements
- 15+ years of professional experience building, shipping, and supporting production or system software.
- Strong hands-on experience with Swift on server and C for eBPF and kernel-level code.
- Experience owning reliability for a critical production system, including availability, performance, rollout safety, and operational readiness.
- Experience leading incident response and writing or leading post-mortems.
- Proficiency in Python or Rust and at least one low-level systems language such as C or C++.
- Strong knowledge of operating system internals, including processes, threads, memory, system calls, and namespaces, on Linux, macOS, or both.
- Credible understanding of attacker behavior, security concepts, and malicious activity in host telemetry.
- Ability to participate in Tier 3 support and lead support-model design.
- Experience developing Tier 1 and Tier 2 support runbooks and training SREs.
- Experience operating endpoint, host, or agent software at very large scale with strict performance and availability objectives.
- Experience with eBPF, EndpointSecurity, or similar OS-level instrumentation.
- Experience with Swift on server, Swift concurrency, and cross-platform builds.
- Understanding of EDR, host-based detection techniques, and current industry practices.
- Experience with policy-driven detection logic such as OPA/Rego and probabilistic data structures for bounded-memory anomaly detection.
- Experience with virtualization and hypervisor environments.
- Public contributions such as open-source work, talks, papers, or blog posts are preferred.
About Apple
Apple designs and sells consumer electronics, software, and services for consumers and professionals worldwide, including iPhone, Mac, iPad, Apple Watch, and AirPods, plus platforms like iOS/macOS and services such as the App Store, iCloud, Music, and TV+. Its business combines device sales with services and subscriptions and in-house silicon design. Founded in 1976, Apple is headquartered in Cupertino, California, and trades on NASDAQ as AAPL.