Senior Security Software Engineer — Supply Chain & SBOM Risk

Apple, Inc.; Seattle (WA); On-site; USD 175,000 - 309,000; Full time

Benefits offered by this job

Comprehensive medical and dental

Retirement benefits

Employee Stock Purchase Plan

Tuition reimbursement

Job summary

Apple Inc. in Seattle, WA, is seeking a Senior Security Software Engineer to own risk modeling across software composition analysis, vulnerability data, and automation at scale. You will shape how inventory and signals are correlated, mentor engineers, and set the security bar for a large, modern platform.

You will work across diverse codebases and build systems, defining secure development practices as dependency choices evolve with AI coding assistants and agents.

Qualifications

• 8+ years in security software engineering with end-to-end ownership.
• Strong Go and Java with their ecosystems.
• Experience with SBOM standards and SCA tooling.
• Ability to lead architectures and mentor engineers.
• Familiarity with CI/CD, cloud infra (Kubernetes/AWS).
• Hands-on with AI coding assistants and related risks.

Responsibilities

• Own technical depth across software composition analysis and vulnerability data.
• Model and correlate software inventory and risk signals.
• Drive architecture decisions and set technical direction for the team.
• Mentor engineers and communicate tradeoffs to security leadership.
• Collaborate across build systems, registries, and SBOM generation at scale.

Skills

Security engineering

Go

Java

SBOM standards

SCA tooling

Vulnerability data

Technical leadership

CI/CD

Kubernetes

AWS

AI coding tools

Tools

CycloneDX

SPDX

cdxgen

syft

OCI images

SLSA

Job description

Apple Inc. in Seattle, WA, is seeking a Senior Security Software Engineer to own risk modeling across software composition analysis, vulnerability data, and automation at scale. You will shape how inventory and signals are correlated, mentor engineers, and set the security bar for a large, modern platform.

You will work across diverse codebases and build systems, defining secure development practices as dependency choices evolve with AI coding assistants and agents.