Security Domain Expert, Perimeter and Network Security, Enterprise Technology Services

Apple, Inc.; Sunnyvale (CA); On-site; USD 216,000 - 394,000; Full time

Benefits offered by this job

Stock programs

Relocation assistance

Educational reimbursement

Medical and dental coverage

Job summary

Apple, Inc. is seeking a Security Domain Expert for Perimeter and Network Security within the Emerging Technologies group in Sunnyvale. The role focuses on representing and guiding Apple's perimeter security platform across architecture forums, security reviews, and leadership briefings.

You will work with proxies, edge services, load balancers, and service mesh to enforce security policies and mitigate threats, spanning on-prem and cloud environments (GCP, AWS).

Qualifications

• Bachelor's degree or equivalent in a technical field.
• 12+ years in security engineering/architecture with hands-on background.
• Expertise in perimeter and network security including WAF and DDoS mitigation.
• Strong knowledge of proxy technologies across edge, origin, service mesh, and API gateway tiers.
• Experience with on-prem and cloud environments (GCP, AWS).
• Proven ability to represent security in architecture reviews and leadership forums.
• Ability to translate security concepts to both engineers and executives.

Responsibilities

• Serve as domain authority for perimeter and network security.
• Represent the security platform in architecture forums and leadership briefings.
• Advise application teams on traffic patterns and security requirements.
• Evaluate threats and shape security strategy.
• Drive cross-organizational alignment on security initiatives.
• Translate complex concepts into clear narratives for leadership.
• Mentor team members in security domain knowledge.

Skills

Perimeter security

Network security

WAF design

Threat mitigation

Executive communication

Security policy enforcement

Education

Bachelor's degree in CS/CE/Cybersecurity

Master's degree in CS/IS (preferred)

Tools

NGINX

Envoy

HAProxy

TLS/mTLS

Security gateways

Job description

Security Domain Expert, Perimeter and Network Security, Enterprise Technology Services

Sunnyvale, California, United States Software and Services

At Apple, new insights often become revolutionary products, services, and customer experiences very quickly. Bring passion and dedication to your job, and there's no telling what you could accomplish. The Emerging Technologies team within IS&T specializes in building forward-looking, extremely scalable systems and solutions in two areas: Information Security and general-purpose, reusable platforms in the space of Integration and Orchestration. The team has a passion for solving challenging problems, exploring new domains, and engineering transformational solutions. We operate with a startup mindset — lean teams, high ownership, and technical leaders who flex across domains to build and scale new capabilities.

Description

The Emerging Technologies team is seeking a Security Domain Expert to serve as the outward face and technical authority of Apple's perimeter and network security platform. You will represent the team across Apple — in architecture forums, security reviews, and leadership briefings — bringing deep expertise in perimeter security, proxy technologies, and threat mitigation to every engagement. This role requires hands‑on experience with the technologies at the heart of our platform — proxies, origin, edge, application load balancers, service mesh, API & AI security gateways, WAF, DDoS mitigation, bot prevention, TLS termination/origination, and security policy enforcement across protocols (TCP, UDP, HTTP/HTTPS). You will apply that expertise to advise partner teams on how our security capabilities address their traffic and security challenges, and to represent the team's technical perspective in cross‑organizational forums. You will also serve as the bridge between our engineering team and the broader Apple ecosystem — working directly with application teams to understand their security requirements, synthesizing cross‑team needs to inform platform strategy and roadmap, and translating technical security concepts into clear narratives for leadership. This role spans deep technical engagement with security and infrastructure teams through to executive communication in equal measure.

Responsibilities

• Serve as the domain authority for perimeter and network security across the Emerging Technologies organization — providing expert guidance on WAF, DDoS mitigation, bot prevention, TLS management, real‑time threat intelligence, and security policy enforcement across proxy tiers.
• Represent the security platform in architecture forums, security reviews, cross‑organizational reviews, and leadership briefings — serving as the team's technical voice in all external settings.
• Advise application teams across Apple on their traffic patterns and security requirements, articulating how the platform's capabilities — across edge proxies, origin/application load balancers, service mesh, and API & AI security gateways — address their specific needs.
• Evaluate emerging threats, attack vectors, and defensive technologies — bring industry perspective to shape the team's security strategy and keep Apple's defenses at the forefront.
• Drive alignment on cross‑organizational security initiatives — build consensus on priorities, trade‑offs, and sequencing for efforts that require coordinated action across security, infrastructure, SRE, cloud, and application teams.
• Synthesize cross‑team intelligence — bring insights from partner engagements and organizational priorities back to the engineering team to inform and influence platform strategy and roadmap direction.
• Partner with the platform architect and engineering managers to ensure the team's technical direction — defense‑in‑depth strategy, threat coverage, and platform evolution across on‑premises and cloud environments (GCP, AWS) — reflects real‑world security needs.
• Contribute to technical design reviews and security architecture discussions, bringing the external perspective of partner team requirements and cross‑organizational constraints.
• Assess gaps in cross‑organizational security coverage; proactively recommend solutions and drive remediation in partnership with the engineering team.
• Translate complex perimeter security concepts into clear, compelling narratives for audiences ranging from engineers to senior leadership.
• Mentor and elevate team members in security domain knowledge, cross‑functional engagement, and stakeholder communication.

Minimum Qualifications

• Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, or equivalent technical discipline.
• 12+ years of experience in security engineering or security architecture, with a strong hands‑on technical foundation.
• Deep expertise in perimeter and network security — WAF design, DDoS mitigation strategies, bot detection techniques, TLS/mTLS, TCP/IP, HTTP/HTTPS, and DNS security.
• Strong understanding of proxy technologies (NGINX, Envoy, HAProxy) across edge, origin, service mesh, and API gateway tiers — including how security controls are implemented and enforced at the proxy layer.
• Experience with security policy enforcement and configuration management across distributed infrastructure at scale.
• Familiarity with systems that span on‑premises data centers and public cloud environments (GCP, AWS).
• Proven experience representing a security team as a domain authority — in architecture reviews, security forums, executive briefings, and cross‑organizational planning.
• Experience working directly with application and infrastructure teams to understand their traffic and security requirements and design integrated solutions.
• Ability to communicate complex security topics with equal clarity to engineers and senior leadership.
• Track record of influencing security direction and outcomes across organizational boundaries without direct management authority.
• Excellent written and verbal communication skills.

Preferred Qualifications

• M.S. in Computer Science, Computer Engineering, Cybersecurity, or Information Security.
• Experience with proxy engine internals — C, C++, Lua, or WASM‑based customization of NGINX, Envoy, or similar engines for implementing security controls in the runtime data path.
• Experience with L4/L7 proxy architectures, protocol‑level security, and load balancing strategies.
• Understanding of orchestration/control plane systems for security policy distribution and lifecycle management at fleet scale.
• Familiarity with OWASP threat models, CVE analysis, threat landscape trends, and security incident response from an engineering perspective.
• Experience with service mesh architectures (Istio, Envoy-based), API & AI security gateway patterns, and containerization (Kubernetes, Docker).
• Knowledge of real‑time threat intelligence distribution and event‑driven security telemetry at scale.
• Recognized contributions to the security community — conference talks, published research, open‑source contributions, or patents.

At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $216,200 and $394,000, and your base pay will depend on your skills, qualifications, experience, and location.

Apple employees also have the opportunity to become an Apple shareholder through participation in Apple’s discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards, and can purchase Apple stock at a discount if voluntarily participating in Apple’s Employee Stock Purchase Plan. You’ll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses — including tuition. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. Learn more about Apple Benefits.

Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.

Apple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant.

At Apple, we believe accessibility is a fundamental human right. You’ll find that idea reflected in everything here — in our culture, our benefits and our digital tools. By welcoming as many perspectives as possible, we help you build a career where you feel like you belong.

Learn about accessibility in Apple’s workplace.

Learn about reasonable accommodations for job applicants.

Apple accepts applications to this posting on an ongoing basis.