Secure Design: Build Systems Security Reviewer

Apple; Cupertino (CA); On-site; USD 175,000 - 313,000; Full time

Job summary

An established industry player is seeking a talented individual to join their Secure Design team, focusing on the security of their software build systems. This role involves leading threat modeling and security reviews, ensuring the integrity of software before it reaches customers. The ideal candidate will have strong technical skills and a passion for security, working alongside some of the best engineers to create innovative solutions. With a commitment to user privacy and security, this position offers the chance to make a significant impact on products loved by millions. Join a dynamic team where your contributions will shape the future of technology.

Benefits

Comprehensive medical and dental coverage

Retirement benefits

Discounted products and free services

Educational reimbursement for tuition

Employee stock purchase plan

Qualifications

• Proficient in security architecture design for complex projects.
• Experience with threat modeling and secure coding practices.

Responsibilities

• Lead security efforts for software build systems at Apple.
• Collaborate with engineers to identify and mitigate security vulnerabilities.

Skills

Security Architecture Design

Threat Modeling

Collaboration with Engineering Teams

Understanding Software Supply Chain Threats

Secure Coding

Code Auditing

Software Security Testing

Multitasking and Project Management

Tools

macOS

Linux

Objective-C

Python

Ruby

Swift

Job description

Secure Design: Build Systems Security Reviewer

Cupertino, California, United States Software and Services

Summary

Posted: Dec 19, 2024

Weekly Hours: 40

Role Number: 200584319

Embedded within Apple’s Security Engineering & Architecture organization, the Secure Design team’s mission is to ensure that the software we ship to our customers is secure. We believe that when it comes to building the world's most secure operating systems, collaboration is key. We're looking for a talented and inspired individual to lead threat modeling and security review of Apple's software build system, attacking these internal backend systems before they ship with the goal of better safeguarding our users. Working with some of the best engineers in the world, your influence will have a direct positive impact on the security of Apple's extraordinary products, including iPhone, iPad, Mac, Vision Pro, Apple Watch, and Apple TV. From consulting on both hardware and software, threat modeling, auditing code and reviewing designs, the job is as diverse as it is critical. This position requires someone with strong technical abilities and a passionate desire to secure systems by showing how they can be broken. We design and secure software and infrastructure that affects for hundreds of millions of users. We make products that people LOVE. We are committed to user privacy and security. We have some of the most creative, passionate, hardworking engineers in the industry. We challenge each other to go beyond the norm to find new, innovative ways of solving problems and to make software safer, easier, and more fun to use.

Description

You will be a technical lead responsible for securing the compute infrastructure that creates and builds the software that Apple ships to its customers. Work cooperatively with other parts of Apple on a broad range of technologies and initiatives to enhance security. Design new and innovative ways of utilizing secure compute infra while preserving engineering ease-of-use and development velocity. Work with engineers to analyze systems, threat model new components, identify security vulnerabilities in implementation, and recommend security controls to ensure security and integrity of our build pipeline. Evangelize and drive the adoption of these technologies across the organization. Lead ground breaking security efforts at a scale only found at Apple.

Minimum Qualifications

1. Proficient in security architecture design and review of complex server/infrastructure projects
2. Familiarity with creating threat models for complex software products
3. Influences and collaborates with colleagues (engineering teams) and decision makers to develop secure solutions and to accomplish security goals
4. An understanding of past, current, and emerging software supply chain attacks/threats

Preferred Qualifications

1. Experience applying security engineering to software build and delivery pipelines
2. Excellent at multitasking, organizing, and prioritizing complex projects to meet deadlines
3. Background in secure coding, code auditing, and software security testing
4. Experience working with engineering teams to build secure software
5. Proficiency in macOS and/or Linux internals and modern mitigation techniques
6. Programming background in Objective-C, Python, Ruby, Swift, or other similar language

Pay & Benefits

At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $175,800 and $312,200, and your base pay will depend on your skills, qualifications, experience, and location.

Apple employees also have the opportunity to become an Apple shareholder through participation in Apple’s discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards, and can purchase Apple stock at a discount if voluntarily participating in Apple’s Employee Stock Purchase Plan. You’ll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses — including tuition.

Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.

Apple is an equal opportunity employer that is committed to inclusion and diversity. We take affirmative action to ensure equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics.