Senior Software Engineer - Security Automation

People at Apple don't just build products — they craft the kind of experiences that have revolutionized entire industries. The diverse collection of our people and their ideas inspire innovation in everything we do. Imagine what you could do here! Join Apple, and help us leave the world better than we found it.

The Apple Services Engineering Security team builds and provides secure systems and infrastructure that fuel Apple's services (such as iCloud, iTunes, Siri, App Store, and Maps). As part of the ASE Security team, you will help manage the security needs of Apple's services around the world. You will build and integrate the security controls, guardrails, and frameworks that help protect our customers' data in Apple's infrastructure.

We are ASE Security Automation. We build the tools, systems, and services that automate security assurance across Apple's services: agentic vulnerability and rapid risk assessment, design review tooling, and the registers of security-critical applications, data, and environments that security teams rely on, We build automation capabilities, and the tools other security teams run today, under one roof: risk-scoring pipelines, compliance workflows, and an agentic risk-assessment layer.

We are hiring a Staff/Senior Software Engineer who can build, support, refactor, and ship across all of it.

We're looking for a versatile senior software engineer who moves between our systems based on organizational priority and makes each one better for having worked on it. One quarter you may be implementing a critical service on the new platform; the next, refactoring a legacy tool that security reviewers depend on daily, or preparing a system for production so it runs with low friction and low maintenance.

You will work with our Tech Leads and hiring manager on technical direction, then independently own the delivery of the critical components you take on — from design through production. You will set the bar for how our systems are built to run well in production, and you will mentor engineers and influence their technical solutions along the way.

Minimum Qualifications

• 8+ years building, operating, and maintaining production software — backend services, automation
• Highly proficient in at least one of Python, Go, or Java
• Experience building production web frontends with TypeScript and React
• Hands-on experience with cloud infrastructure, containers and Kubernetes, CI/CD, and infrastructure as code
• Experience supporting and maintaining legacy systems in production, refactoring or migrating them into new systems, and building new systems from scratch
• Track record of building systems for operational excellence: staged deployments, test environments, automated testing, and observability
• Experience integrating first-party and third-party APIs, tools, and services into reliable end-to-end workflows
• MS or BS or equivalent experience in Computer Science, Engineering, or a related field OR equivalent practical experience in Software or Security Engineering.

Preferred Qualifications

• Production experience in more than one of Python, Go, or Java
• Working knowledge of application and cloud security concepts (threat modeling, vulnerabilities, secure configuration)
• Experience with security tooling such as SAST/SCA scanners, SBOM tooling, or vulnerability intelligence platforms
• Experience building LLM- or agent-based features, integrating agents with existing systems (tool calling, MCP), or evaluating AI output quality
• Familiarity with AWS cloud resources (S3, EC2, Lambda, Step Functions, etc.)
• Experience building batch or streaming data pipelines
• Experience with Swift or mobile development
• Experience delivering tooling used by non-engineer users such as security reviewers or analysts
• Track record of mentoring engineers and raising engineering practices beyond your own work