Senior Incident Response Engineer — Lead Global IR

Apple, Inc.; Seattle (WA); On-site; USD 167,000 - 251,000; Full time

Benefits offered by this job

Stock programs

Medical & dental

Retirement benefits

Educational expense reimbursement

Job summary

Apple Information Security is seeking a senior security incident response engineer to join its Incident Response team. The role focuses on identification, containment, and mitigation of security incidents on a follow-the-sun model.

You will drive complex investigations, set investigative quality standards, and turn learnings into durable capabilities. The role requires deep incident response expertise and collaboration across Apple’s global teams.

Qualifications

• B.S. in Computer Science, Engineering, or similar degree and/or equivalent 5+ years of Information Security experience.
• Ability to drive investigations independently and apply remediation strategies.
• Experience mentoring responders and improving team work.
• Experience with incident response automation strategies and tooling.
• Proficiency in one or more programming or scripting languages.

Responsibilities

• Own incidents end to end from detection to resolution and containment.
• Coach and mentor other responders to raise investigative quality.
• Build durable capabilities like detections, queries, and automations.
• Analyze incidents at scale with raw telemetry and multiple data sources.
• Collaborate with Apple units to strengthen security posture and response.

Skills

Incident response automation

Mentoring teammates

Threat modeling

Data analysis

Identity management knowledge

Malware analysis/forensics

Programming/scripting languages

Education

B.S. in Computer Science or Engineering

Job description

Apple Information Security is seeking a senior security incident response engineer to join its Incident Response team. The role focuses on identification, containment, and mitigation of security incidents on a follow-the-sun model.

You will drive complex investigations, set investigative quality standards, and turn learnings into durable capabilities. The role requires deep incident response expertise and collaboration across Apple’s global teams.