Senior Security Engineer
Job Description
Apple Services Engineering (ASE) is looking for a Senior Security Engineer to help protect iCloud services while shaping secure platforms and services. In this role, you will partner closely with engineering teams to lead threat modeling, run security reviews, and drive security improvements across large-scale development efforts.
This position is based in Seattle, WA (onsite), with an annual salary range of USD 175,000 - 308,500, and requires 6+ years of relevant security experience.
What you’ll do
- Partner with engineering teams building new products and features to protect ASE services and develop secure platforms and services.
- Lead implementation of security early in the design phase through threat modeling and security guidance.
- Collaborate with partner teams across security engineering, privacy, and offensive security to help keep Apple services secure for users.
- Act as the primary security team point of contact for multiple large engineering efforts.
- Work with teams throughout the development lifecycle, including security reviews and creation of threat models.
- Develop scalable security methodologies based on findings from reviews and threat modeling engagements.
- Help define, automate, and advocate for platform-wide security improvements, including setting security goals and identifying improvement areas.
- Use business acumen to guide partners toward secure designs and support informed risk decisions.
- Develop proof of concept systems to automate security recommendations, vulnerability discovery, and security process workflows.
- Use data to increase security review efficiency and prioritize high-value security team engagement.
- Make security decisions that impact millions of users and maintain relationships that drive ongoing security improvements.
- Stay current on emerging security technologies, vulnerabilities, and methodologies.
Minimum qualifications
- 6+ years conducting security reviews, threat modeling, tracking findings, and communicating risk to engineering and leadership.
- Knowledge of distributed systems design patterns and security implications for platform services at cloud scale.
- Deep understanding of cloud-native architecture and managed platform services (for example, compute, storage, networking, and databases).
- Experience with multi-tenant system design, including securing multi-tenant software as a service (SaaS) and platform as a service (PaaS).
- Comfort with at least one programming language such as Python, Java, Go, or Swift.
- Experience with security standard processes in third-party cloud environments.
Technologies
- Python, Java, Go, Swift
- Kubernetes
- Artificial Intelligence, Machine Learning
- Cloud-native architecture
Benefits
- Comprehensive medical and dental coverage
- Retirement benefits
- Discounted products and free services
- Reimbursement for certain educational expenses, including tuition
- Opportunity to become an Apple shareholder through participation in Apple’s discretionary employee stock programs
- Eligible for discretionary restricted stock unit awards
- Can purchase Apple stock at a discount through optional participation in Apple’s Employee Stock Purchase Plan
- May be eligible for discretionary bonuses or commission payments, and relocation (role-dependent)
Preferred qualifications
- Bachelor’s Degree or equivalent experience preferred
- Community contributions such as public CVEs, bug bounty recognition, open source tools, or blogs
- Experience securing container orchestration systems (for example, Kubernetes) and understanding security implications in multi-tenant environments
- Experience with Artificial Intelligence and Machine Learning