Vulnerability Response Engineer — Security Automation

Apple Inc.; Greater London; On-site; GBP 90,000 - 150,000; Full time

Job summary

Apple Inc. in London is seeking a Vulnerability Response Engineer to join a fast-paced security team.

You will replicate vulnerabilities, perform large-scale external assessments, and drive remediation with cross-functional partners while communicating findings to researchers and stakeholders. You will develop and improve tooling, participate in on-call rotations, and help scale Apple’s vulnerability response program across a globally distributed environment, ensuring timely risk mitigation for

Qualifications

• Familiarity with common security vulnerabilities and risk articulation to engineers and stakeholders.
• Strong penetration testing skills with focus on web applications and security research.
• Knowledge of large-scale security solutions and vulnerability scanning tools (commercial/open source).
• Software development or scripting experience with Python/Go/Rust/Bash to build automation.

Responsibilities

• Replicate reported vulnerabilities and scale variant analysis across external perimeter.
• Conduct security assessments and large-scale scanning of external properties.
• Provide clear, authoritative responses to vulnerability inquiries to researchers.
• Triage alerts and coordinate rapid mitigation with partner teams.
• Build and improve security tooling and automation to increase team efficiency.
• Participate in on-call rotation including weekends.

Skills

Vulnerability assessment

Web app penetration testing

Security research

Programming/scripting (Python/Go/Rust)

Job description

Apple Inc. in London is seeking a Vulnerability Response Engineer to join a fast-paced security team.

You will replicate vulnerabilities, perform large-scale external assessments, and drive remediation with cross-functional partners while communicating findings to researchers and stakeholders. You will develop and improve tooling, participate in on-call rotations, and help scale Apple’s vulnerability response program across a globally distributed environment, ensuring timely risk mitigation for