Senior Security Engineering Manager - Agentic Detection & Threat Hunting

Apple Inc.; Austin (TX); Vor Ort; USD 180.000 - 240.000; Vollzeit

Zusammenfassung

Apple Inc. is seeking a Senior Security Engineering Manager for the Agentic Detection & Threat Hunting group in Austin, TX. You will lead a seasoned team, partner with on-host and fleet-scale detection engineers, and drive autonomous GenAI workflows for detection and response across Apple’s cloud and devices.

You will shape strategy, mentoring engineers, aligning with security partners, and delivering high-confidence findings that scale beyond traditional detection capabilities.

Qualifikationen

• 10+ years of experience managing engineering teams.
• 8+ years building and shipping production software or data systems.
• Experience deploying GenAI workflows to production for detection, response or threat hunting.
• Deep domain experience in security detection and response, including telemetry and incident handling.
• Experience with large‑scale security data, pipelines, correlation and alert handling.

Aufgaben

• Lead a team of engineers in security detection and threat hunting.
• Collaborate with partner teams across Apple’s security org on delivery and operations.
• Drive deployment of autonomous GenAI workflows for detection and response.
• Influence security posture and protect users at scale.

Kenntnisse

Engineering management

Production software

GenAI workflows

Threat hunting

Security detection

Tools

Spark

Databricks

Streaming pipelines

Jobbeschreibung

Senior Security Engineering Manager - Agentic Detection & Threat Hunting

Austin, Texas, United States Software and Services

The Detection team within Apple Services Engineering (ASE) is responsible for finding threat actors attacking approximately three quarters of Apple's systems and services. We do this by partnering closely with engineering teams to build a deep technical understanding of how their systems work, and a comprehensive understanding of the threats against them.Our team is built around two halves that learn from each other quickly. One half builds the on-host detection and response agent that runs across Apple's datacenter fleet. The other half, which you will lead, builds the fleet-scale detection and response platform that sits above those hosts. It fuses signals from hosts, applications, cloud control planes and identity into a small stream of high-confidence security findings, and it applies agentic AI to detection, triage, response and threat hunting so that machines do the work that humans cannot scale to do. The two halves depend on each other, and the speed of the feedback loop between them is one of the team's greatest strengths.

Description

We are looking for a Senior Manager who is a builder first. This role is technical and hands-on. You will manage a team of experienced engineers, and you will work as a close peer with the manager of the on-host agent team. You will work with partner teams across Apple's security organization on delivery, platform dependencies and operations. You will bring experience and lessons learned from deploying autonomous GenAI workflows in detection and response. This role will leave a lasting impact on Apple's security posture, and by extension on the security of Apple's customers around the world.

Minimum Qualifications

• 10+ years of experience managing engineering teams. You are not a first-time manager. You have run a team, coached people, set and held a high bar, and handled performance issues directly.
• 8+ years of professional experience building and shipping production software or data systems. You are technical enough to be credible with senior individual contributors and to challenge their architecture decisions on equal footing.
• Experience deploying standalone GenAI or agentic workflows to production that do useful work in detection, response, threat hunting or a closely related security or operations domain. You can show what they did, who used them, and what changed as a result.
• Deep domain experience in security detection and response, including how attackers behave, how malicious activity shows up in telemetry, and how alerts become investigated and closed incidents. Experience with threat hunting is a strong plus.
• Experience with large-scale security data and detection platforms, including pipelines, correlation, enrichment and alert handling. This must not be your first time doing this kind of work.

Preferred Qualifications

• Experience leading threat hunting or detection engineering teams, and turning hunting results into improved detections.
• Experience with Spark, Databricks or similar large-scale data processing platforms, and with streaming alert pipelines.
• Experience designing automated or semi-automated response and containment.
• Experience scaling a team (hiring, onboarding, leveling) while shipping.
• Experience managing a team that works closely with partner organizations that own related services, and keeping those partnerships productive under changing priorities.
• Experience setting direction within an agreed strategy and driving priorities through to results.
• Public contributions such as open source work, talks, papers or blog posts.
• Business acumen to weigh detection and automation benefit against cost, and to do security work in ways that preserve user privacy.

Apple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant

At Apple, we believe accessibility is a fundamental human right. You’ll find that idea reflected in everything here — in our culture, our benefits and our digital tools. By welcoming as many perspectives as possible, we help you build a career where you feel like you belong.
Learn about accessibility in Apple’s workplace
Learn about reasonable accommodations for job applicants

Apple accepts applications to this posting on an ongoing basis.