Senior Security Engineer - Strategic Risk

Apple Inc.; Seattle (WA); On-site; USD 175,000 - 309,000; Full time

Benefits offered by this job

Comprehensive medical and dental

Retirement benefits

Employee stock programs

Job summary

Apple's Services Engineering Security (ASE) team builds and protects secure systems for Apple’s services, including iCloud, iTunes, Siri, App Store, and Maps. The Senior Security Engineer-Strategic Risk will partner with engineering teams across the development lifecycle to define and implement security controls and guardrails.

You will conduct security reviews, post-incident investigations, and develop threat models to drive scalable improvements focused on protecting customer data at scale.

Qualifications

• 7 or more years conducting security reviews, incident response, threat modeling, or security engineering.
• Demonstrated ability to design, document, and implement new security processes.
• Understanding of cloud-native architecture and managed platform services (compute, storage, networking, databases).
• Expertise in threat modeling, operational threat intelligence, and common attack vectors and frameworks.

Responsibilities

• Identify areas for improvement related to user account security and establish appropriate security goals.
• Lead discovery conversations to understand architecture, current security posture, and blockers to adoption.
• Measure and communicate risks to leaders and stakeholders.
• Develop and implement AI technologies to manage risk.
• Perform post-incident reviews and investigations.
• Research and identify emerging technologies, threats, and vulnerabilities to proactively define security requirements and controls before they reach production.
• Partner with teams to improve the security of their services and systems.

Skills

security reviews

incident response

threat modeling

security engineering

Tools

Splunk

OSQuery

Job description

Senior Security Engineer - Strategic Risk

Seattle, Washington, United States Software and Services

The Apple Services Engineering Security team builds and provides secure systems and infrastructure that fuel Apple’s services (such as iCloud, iTunes, Siri, App Store, and Maps). As part of the ASE Security team, you will help manage the security needs of Apple’s services around the world. You will build and integrate the security controls, guardrails, and frameworks that help protect our customers data in Apple’s infrastructure. Your work will help build solutions to a variety of outstanding security risks to Apple systems and data. Join us, and you’ll play a meaningful role in ensuring the highest standard of security for one of the most-watched companies in the world.

Description

In this role, you will be the primary security team point of contact for several large engineering efforts. You will work with engineering teams throughout their development lifecycle. You will conduct security reviews, post incident reviews, develop threat models, and use the insights from these engagements to build scalable methodologies. You will help define, automate and advocate for application level and platform-wide security improvements with a focus on risks to customer accounts and data. You will play a hands on role in ensuring that programs are reviewed, adjusted, implemented and tested appropriately.

Responsibilities

• Identify areas for improvement related to user account security and establish appropriate security goals
• Lead discovery conversations to understand architecture, current security posture, and blockers to adoption
• Measure and communicate risks to leaders and stakeholders
• Develop and implement AI technologies to manage risk
• Perform post-incident reviews and investigations
• Research and identify emerging technologies, threats, and vulnerabilities to proactively define security requirements and controls before they reach production
• Partner with teams to improve the security of their services and systems.

Minimum Qualifications

• 7 or more years conducting security reviews, incident response, threat modeling, or security engineering
• Demonstrated ability to design, document, and implement new security processes
• Understanding of cloud-native architecture and managed platform service (eg. compute, storage, networking, databases)
• Expertise in threat modeling, operational threat intelligence, and common attack vectors and frameworks.
• Understanding of applied cryptography, access control, modern authentication frameworks, and other security mechanisms
• Experience with enterprise log collection and analysis platforms (e.g., Splunk, OSQuery)

Preferred Qualifications

• Experience with threat hunting, insider risk and/or investigations
• Experience working with data engineers to define metrics and interpret results from detection and risk models
• Experience in applying and experimenting with AI/ML, to solve security related use-cases

At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $175,000 and $308,500, and your base pay will depend on your skills, qualifications, experience, and location.

Apple employees also have the opportunity to become an Apple shareholder through participation in Apple’s discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards, and can purchase Apple stock at a discount if voluntarily participating in Apple’s Employee Stock Purchase Plan. You’ll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses — including tuition. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. Learn more about Apple Benefits

Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.

Apple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant

At Apple, we believe accessibility is a fundamental human right. You’ll find that idea reflected in everything here — in our culture, our benefits and our digital tools. By welcoming as many perspectives as possible, we help you build a career where you feel like you belong.

Learn about accessibility in Apple’s workplace

Learn about reasonable accommodations for job applicants

Apple accepts applications to this posting on an ongoing basis.