Build Security Engineer: Fortify Software Pipelines

Apple Inc.; Austin (TX); On-site; USD 110,000 - 170,000; Full time

Job summary

Apple Inc. in Austin, Texas seeks a Build Security Engineer to protect the systems that manage, build, and distribute Apple’s software.

You will conduct threat modeling, security assessments, and develop controls for the software build pipeline, partnering with engineering teams to strengthen security posture. The role emphasizes mentoring, documentation, and staying ahead of evolving threats in a dynamic software environment.

Qualifications

• 3+ years of cybersecurity experience with hands-on threat modeling, security assessments, or penetration testing.
• Experience with scripting or programming languages such as Python or Bash.
• Experience working cross-functionally with engineering teams on security requirements or controls.

Responsibilities

• Conduct threat modeling and security assessments of critical build infrastructure and update models as threats evolve.
• Collaborate with engineering teams to ensure adherence to security standards and guide implementation of controls.
• Develop, implement, and maintain technical solutions to mitigate security risks in the build pipeline.
• Write and maintain test cases to validate control effectiveness and resilience.
• Lead penetration tests and red team exercises focused on the build path and infrastructure.
• Research vulnerabilities in critical software components and recommend mitigations.
• Create and maintain documentation outlining security guidelines for engineering teams.

Skills

Threat modeling

Security assessments

Penetration testing

Scripting (Python, Bash)

Cross-functional collaboration

Tools

Kubernetes

Go

Perl

Job description

Apple Inc. in Austin, Texas seeks a Build Security Engineer to protect the systems that manage, build, and distribute Apple’s software.

You will conduct threat modeling, security assessments, and develop controls for the software build pipeline, partnering with engineering teams to strengthen security posture. The role emphasizes mentoring, documentation, and staying ahead of evolving threats in a dynamic software environment.