Senior Software Engineer, Security Tools & Supply Chain

Apple Inc.; Seattle (WA); On-site; USD 175,000 - 309,000; Full time

Benefits offered by this job

Medical and dental coverage

Retirement benefits

Tuition reimbursement

Employee stock purchase plan

Job summary

Apple Inc. in Seattle, WA is seeking a Senior Software Engineer to design, write, and ship production software for the software supply chain security team.

You will build tooling that helps engineers understand dependencies, verify integrity, and secure production code. You will collaborate across infrastructure, platform, and product security teams, owning substantial components end-to-end while shipping secure, scalable services and APIs.

Qualifications

• 8+ years of hands-on software engineering experience with production ownership of non-trivial systems.
• Proficiency in at least two languages (Python, Go, Java) and cross-language work as needed.
• Solid knowledge of software supply chain security concepts and attestation infrastructure.
• Experience designing and operating agentic systems and LLM-integrated applications in production.
• Familiarity with security assurance methodologies, including static and dynamic analysis.

Responsibilities

• Design, implement, test, and operate security services and features.
• Partner with security teams to build tooling and services used by Apple engineers.
• Own significant components end-to-end and iterate with feedback from teams.
• Conduct code and security reviews and present results to the team.

Skills

Python

Go

Java

Distributed systems

LLM integration

CI/CD

Shell scripting (Bash)

Education

Bachelor’s degree in Computer Science or equivalent

Tools

gRPC

Git

Bash

Job description

Apple Inc. in Seattle, WA is seeking a Senior Software Engineer to design, write, and ship production software for the software supply chain security team.

You will build tooling that helps engineers understand dependencies, verify integrity, and secure production code. You will collaborate across infrastructure, platform, and product security teams, owning substantial components end-to-end while shipping secure, scalable services and APIs.