Software Security Research Engineer - Browser Technologies

Apple; Cheltenham; On-site; GBP 85,000 - 125,000; Full time

Job summary

Apple seeks a talented security engineer to join the Security Engineering & Architecture group, focusing on securing browser technologies across Apple platforms. You will lead research on vulnerabilities, invent defensive tools, and drive mitigations with partner engineering teams.

The role covers reverse engineering, analysis, and collaboration across hardware and software teams to keep iPhone, Vision Pro, Mac, and Apple TV secure.

Qualifications

• Background in browser technologies or native technologies on which browsers are built.
• Background in secure coding and code auditing.
• Knowledge of modern anti-exploitation mitigations and their effectiveness.
• Programming in C, C++, and Swift.

Responsibilities

• Identify vulnerabilities and trends across platforms and browser technologies.
• Invent defensive tools and drive delivery of security mitigations with partner teams.
• Review code and propose designs for new security mitigations for billions of devices.
• Collaborate with hardware and software teams to secure products.

Skills

Browser technologies

Secure coding

Code auditing

Anti-exploitation mitigations

C/C++

Swift

Job description

Summary

Help Apple secure the world’s most advanced consumer devices, which people trust to store their personal and professional data.

Security Engineering & Architecture (SEAR) is at the core of Apple’s product security strategy and we’re fanatical about protecting our users. We're looking for a talented security engineer to join our exceptional team whose focus is on securing Browser technologies; from the depths of the core browser engine itself to ensuring we create a fundamentally safe native environment which allow our developers to build critical applications on the web platform. As a security engineer in SEAR, you will lead research and analysis in identifying vulnerabilities and trends across our platforms, invent new defensive technologies to eliminate entire classes of issues, and drive the delivery of security mitigations alongside our partner engineering teams.

We design and secure platforms for billions of users and are committed to user privacy and security. We have some of the most creative, passionate, hardworking engineers in the industry. Our team challenge each other to go beyond the norm to find new, innovative ways of solving problems and to make software safer, easier, and more fun to use. Not many jobs can offer all of these things. Security engineering jobs at Apple do, and much more.

Description

You are joining an exceptional team focusing on securing Browser Technologies across Apple platforms. You will be working alongside a wide variety of teams and vendors and your influence will be felt throughout Apple's extraordinary products, including: the iPhone, Apple Vision Pro, Mac and Apple TV. In addition, you will be responsible for identifying threats in advance and directly involved in Apple's response to critical issues as they arise.

The job is as diverse as it is essential, from reverse engineering an exploit, providing insightful analysis and creating innovative tools, consulting with other teams on both hardware and software, to reviewing code and proposing designs for new security mitigations which will ship on billions of devices. This position requires someone with strong technical strengths and a passionate desire to secure systems.

Your responsibilities will include helping to make Apple's products the industry's most secure, evaluating security-critical code, developing intelligent automated tools for vulnerability finding, building exploits for discovered vulnerabilities to challenge existing mitigation techniques, providing security focused consultations on key technology areas to partner teams and driving the design and development of new mitigations.

Minimum Qualifications

• Background in browser technologies OR the native technologies on which browsers are built.
• Background in secure coding and code auditing.
• Knowledge of modern anti-exploitation mitigations and their effectiveness.
• Programming background in C, C++, and Swift

Preferred Qualifications

• Experience of software exploitation
• Knowledge of macOS and iOS security architectures.
• Knowledge of memory safe languages.
• Proficiency with assembly languages, particularly ARM64, is a big plus.
• Knowledge of how to apply modern security mitigations to performance sensitive parts of the system.

At Apple, we're not all the same. And that's our greatest strength. We draw on the differences in who we are, what we've experienced and how we think. Because to create products that serve everyone, we believe in including everyone. Therefore, we are committed to treating all applicants fairly and equally. As a registered Disability Confident employer, we will work with applicants to make any reasonable accommodations. Apple will consider for employment all qualified applicants with criminal backgrounds in a manner consistent with applicable law.

Learn more

At Apple, we believe accessibility is a fundamental human right. You’ll find that idea reflected in everything here — in our culture, our benefits and our digital tools. By welcoming as many perspectives as possible, we help you build a career where you feel like you belong.

Learn about accessibility in Apple’s workplace

Role Number: 200693385-1035