Sr Software Engineer (Security), Ai & Data Platforms
Summary
Senior security engineer on Apple's AI & Data Platforms security team: conducts application security architecture reviews and testing of cloud-deployed stacks, documents risk assessments and remediation guidance, and builds AI-driven tooling to automate security scanning. Core stack: Python, Linux/macOS, AWS/GCP, LLMs.
At Apple, great ideas have a way of becoming extraordinary products, services, and customer experiences. Are you passionate building best-in-class cybersecurity services that empower engineering teams? Do you want to work in a highly energized and innovative environment where you work at the cutting edge of AI and Cybersecurity? If so, AI & Data Platforms org is looking for engineers like you!
You will be part of Apple’s security engineering team in a unique organization enabling secure AI platforms. You will be joining a team of highly-skilled and passionate security engineers working on this groundbreaking space. In this role you will conduct application security assessments, provide security guidance to engineering and build agentic capabilities to transform and accelerate security assurance.
This role is responsible for assessing platform and product security risks by conducting security architecture review and testing of modern application stack deployed on cloud. You will document detailed risk assessment and remediation guidelines for developers and business owners. You will help develop automated tooling leveraging AI to optimize security scanning and testing partnering closely with other security engineers.
Minimum Qualifications
- Bachelors of Science in Computer Science, Cybersecurity or related engineering field
- 10 years of experience in security engineering, specializing in security testing of modern application technology stacks and designing and implementing preventive and detective security controls.
- Experience with security testing of one or more public cloud services (e.g. AWS, GCP)
- Proficient in Python with hands-on experience across Linux and macOS environments
- Ability to explain basic networking concepts (routing, ACL, load balancers, SSL/TLS, TCP) in order to provide application architecture feedback
- Background in web application development and/or code auditing
Preferred Qualifications
- Experience with offensive and automation tool development
- Experience with vulnerability scanning (SAST, DAST)
- Experience leveraging AI/LLMs for security testing and automation
- Experience with Kubernetes and container security
- Experience with common authentication protocols
- Knowledge of emerging security risks with AI technologies and mitigating controls
- Ability to work independently and track record of leadership, innovation, responsibility, and creative thinking
- Experience developing detailed security assessment reports and leading junior engineers and contractors
- Experience leveraging and customizing open source projects
- Knowledge of DevOps and CI/CD frameworks
- Excellent verbal communications skills and ability to work effectively with multi-functional technical and business teams
