Lead Security Engineer – Deep-Review & Detection

Apple Inc.; Seattle (WA); On-site; USD 175,000 - 309,000; Full time

Benefits offered by this job

Medical & dental

Stock options

Relocation

Tuition reimbursement

Job summary

Apple Inc. in Seattle, WA is seeking a Security Engineer to lead deep reviews of critical ASE services and infrastructure. You will identify security weaknesses, validate detection mechanisms, and provide actionable recommendations to enhance our security posture.

You will collaborate with security engineering, InfoSec, privacy, SRE, detection, and design review teams to develop repeatable testing frameworks and metrics-driven security improvements across complex services.

Qualifications

• 4+ years in information security or software engineering with 2+ years in security reviews.
• Experience reviewing source code to identify vulnerabilities.
• Ability to communicate risk to engineering and leadership teams.
• Experience with complex, large-scale applications and infrastructure.

Responsibilities

• Scope, plan, and lead security reviews for internet-scale applications and infrastructure.
• Identify vulnerabilities and meaningful improvement opportunities.
• Develop proof-of-concept systems to automate security recommendations and workflows.
• Stay current on new security technologies, vulnerabilities, and methodologies.
• Collaborate with architecture and engineering teams to improve controls and detection.

Skills

Security reviews

Threat modeling

Code review

Security architecture

Cloud security

Stakeholder communication

Education

Bachelor's degree in CS/Engineering

Tools

Bug bounty platforms

Job description

Apple Inc. in Seattle, WA is seeking a Security Engineer to lead deep reviews of critical ASE services and infrastructure. You will identify security weaknesses, validate detection mechanisms, and provide actionable recommendations to enhance our security posture.

You will collaborate with security engineering, InfoSec, privacy, SRE, detection, and design review teams to develop repeatable testing frameworks and metrics-driven security improvements across complex services.