Security Engineer-5

Realign Llc; Sunnyvale (CA); On-site; USD 120,000 - 160,000; Full time

Job summary

Apple Sunnyvale is seeking an experienced Security Engineer to secure one of our critical web applications. You will collaborate with engineering leaders, developers, and security teams to assess risk and drive mitigation across the development lifecycle.

You will work with Kubernetes, containers, and Docker, perform penetration testing with Burp/OWASP tools, and communicate findings clearly. AWS experience is a plus in this role.

Qualifications

• 4+ years of security engineering experience, 3+ years in web app security.
• Scripting in Java/Python and Bash.
• Deep knowledge of OWASP, cross-site scripting, SQL injection, and CSRF.
• Experience with security compliance tickets for applications.
• Experience with Kubernetes, containers, and Docker.
• Experience using web app testing tools (Burp, WebInspect, Zap) for vulnerability scanning and pen testing.
• Strong written and verbal communication skills.
• 1 year of AWS experience.

Responsibilities

• Collaborate with engineering leaders and security teams to secure web applications.
• Assess risk landscape for products and drive risk mitigation.
• Work with partner teams on security tools and testing methodologies.
• Educate teams on compliance activities throughout the development lifecycle.

Skills

Security engineering

Web application security

Scripting (Java, Python, Bash)

OWASP & vulnerabilities

Security compliance tickets

Kubernetes & Docker

Penetration testing tools

AWS experience

Tools

Kubernetes

Docker

Burp Suite

WebInspect

OWASP ZAP

AWS

Job description

Sunnyvale, California 94043 Posted October 7th, 2026

Security will have the opportunity to work with the engineering leaders, developers, quality engineers, and security teams to secure one of Apple's critical web applications. Responsibilities include assessing the risk landscape for products and helping drive risk mitigation. You will work with partner teams on security tools, penetration testing, and security testing methodologies to keep web app services secured. You will experience a rapidly evolving technology and threat landscape and contribute to the education of teams on compliance activities throughout the development lifecycle.

Responsibilities and KEY SUCCESS FACTORS

• 4+ years of Security Engineering experience (3+ years with Web Application Security)
• Scripting in Java/ Python, Bash
• Strong understanding of OWASP, vulnerabilities, cross-side scripting, SQL interaction, and cross-side request forgery
• Experience in working with Security Compliance tickets for the Applications
• Experience working with Kubernetes, Containers, and Docker
• Experience using web application testing tools, such as Burp, WebInspect, and/or Zap, to scan for vulnerabilities and for penetration testing
• Strong written and verbal communication skills
• 1 year of AWS experience