Security Engineer Driftwatch

Apple; Cheltenham; On-site; GBP 60,000 - 80,000; Full time

Job summary

A major technology company located in Cheltenham is seeking a full-time security engineer. The role involves partnering with engineering teams to implement security-controls throughout the software lifecycle and ensure the integrity of security measures. Candidates should have strong programming skills, knowledge of OS security fundamentals, and the ability to communicate technical issues effectively. This position offers exposure to innovative technologies and the opportunity to work on prominent products such as the iPhone and Apple TV.

Qualifications

• Strong understanding of security engineering principles and secure SDLC.
• Effectively communicate both verbally and in writing about technical topics.
• Experience with CI/CD integrations and security training.

Responsibilities

• Partner with security engineering teams for insights and automations.
• Ensure quick fixes for detected regressions or violations.
• Work alongside various teams for impactful interventions.

Skills

Experience building and integrating security-enforcing controls across the full software lifecycle

Programming background in Python, Swift, C, C++ or Objective-C

Knowledge of OS security fundamentals

Exceptional ability to communicate about technical topics

Knowledge of macOS and iOS security architectures

Knowledge of observability tools and techniques

Experience driving security projects to identify software regressions

Tools

Splunk

Network security

Identity & Access Management

Encryption

Job description

You will be part of the foundational team who partner with security engineering teams to determine the data-driven insights and automations we need to build to enforce security invariants and policies in a continuous fashion in order to provide high confidence in the integrity of our frontline mitigations and boundaries. Once regressions or violations are detected the team is also responsible for ensuring weve built the right relationships agreements and processes to efficiently get these fixed as quickly as a small team of passionate engineers who thrive in a fast-paced environment driven by unique and novel challenges and deliver things that go beyond what traditional automation could do. You will be working alongside a wide variety of teams and your influence will be felt throughout Apples extraordinary products including : the iPhone Apple Vision Pro Mac and Apple TV. Were looking for someone with a strong understanding of security engineering principles software delivery and secure SDLC; and an understanding of the engineering challenges organisational dynamics and the process trade-offs of building a continuous security capability. If you enjoy creative critical and independent thinking weve love to hear from job is as diverse as it is crucial. Your responsibilities will also include harnessing a vast array of available build data (dynamic and static) to derive meaningful security insights learning how our software is built end-to-end at Apple to determine the most impactful intervention points partnering with infrastructure engineers to get your automations deployed to production and helping engineers that work on Apple products to make better - more secure - choices during position may require some travel to other Apple sites vendors and security conferences.

• Experience building and integrating security-enforcing controls across the full software lifecycle
• Programming background in Python Swift C C and / or Objective-C
• Knowledge of OS security fundamentals including contemporary mitigation techniques and vulnerability classes
• Exceptional ability to communicate clearly and effectively about technical topics (verbal and written)
• Knowledge of macOS and iOS security architectures
• Knowledge of observability tools and techniques
• Experience building visualisations for complex technical information
• Enthusiasm for new technologies and growth
• Experience driving security projects to identify software regressions
• Experience with CI / CD integrations binary analysis telemetry analysis build verifiers IDE and compiler security plug-ins and / or engineer security training

Key Skills

Splunk,IDS,Network security,Computer Networking,Identity & Access Management,PKI,PCI,NIST Standards,Security System Experience,Information Security,Encryption,Siem

Employment Type : Full Time

Experience : years

Vacancy : 1