Senior Security Software Engineer - AI Supply Chain Risk

Socket.dev; Seattle (WA); On-site; USD 190,000 - 270,000; Full time

Job summary

Apple is seeking a senior security software engineer to own architecture for software inventory, SBOMs, and vulnerability data across our vast ecosystem. You will shape data models, drive engineering quality, and mentor teams while collaborating with security leadership to ensure trusted, actionable signals for product and platform teams at scale.

The role requires deep experience in Go and Java security pipelines, SCA tooling, and CI/CD, with cloud/container familiarity (Kubernetes, AWS).

Qualifications

• 8+ years of experience in security software engineering.
• End-to-end ownership of a system or platform.
• Hands-on experience in software supply chain security, dependency management and OSS risk.
• Proficiency in Go and Java ecosystems (Go Modules, Maven/Gradle).
• SBOM standards, SCA tooling and vulnerability data sources (NVD, OSV, GitHub Advisories).
• Track record of technical leadership and architecture decisions.
• Experience with CI/CD, build systems, release engineering; Kubernetes and AWS.
• AI coding assistants and agentic development tools experience.

Responsibilities

• Own technical depth across software composition analysis and vulnerability intelligence.
• Define how software inventory and vulnerability data are modeled and correlated.
• Mentor engineers and set engineering quality standards for the team.
• Collaborate with security leadership to ensure trusted data for engineering teams.

Skills

Security software engineering

End-to-end ownership

OSS risk

Go

Java

Go Modules

Maven/Gradle

SBOM standards

SCA tooling

Vulnerability data sources

NVD

OSV

GitHub Advisories

Architecture decisions

Technical leadership

CI/CD

Build systems

Release engineering

Kubernetes

AWS

AI coding assistants

Tools

CI/CD tooling

Kubernetes

Job description

Apple is seeking a senior security software engineer to own architecture for software inventory, SBOMs, and vulnerability data across our vast ecosystem. You will shape data models, drive engineering quality, and mentor teams while collaborating with security leadership to ensure trusted, actionable signals for product and platform teams at scale.

The role requires deep experience in Go and Java security pipelines, SCA tooling, and CI/CD, with cloud/container familiarity (Kubernetes, AWS).