Vulnerability Response Leader — Global Security Engineering

Apple, Inc.; Seattle (WA); Presencial; USD 202.000 - 304.000; Jornada completa

Descripción de la vacante

Apple Information Security seeks an experienced engineering manager to lead the Vulnerability Response team across the United States and EMEIA. You will balance hands-on technical leadership with people management, guiding programs that include subcomponents of Apple's bug bounty program, proactive vulnerability discovery, WAF rule development, emerging threat response, and custom security tooling.

This role is strategic and operational, requiring deep technical expertise and the ability to

Formación

• 8+ years in information security with vulnerability management, web app pentesting, and incident response.
• 3+ years of people management leading security engineers.

Responsabilidades

• Lead, mentor, and grow a geographically distributed team of security engineers across US/EMEIA.
• Own the team's continuous vulnerability response function, including on-call escalation and rapid remediation coordination.
• Drive proactive security assessment programs including penetration testing and large-scale scanning initiatives.
• Manage the lifecycle of external researcher engagement, report validation, risk assessment, and remediation coordination.
• Guide the development and maintenance of custom security tools and automation for vulnerability detection and remediation tracking.
• Serve as a trusted security advisor to engineering, product, and leadership teams to align priorities.

Conocimientos

Web app security

Penetration testing

Incident response

People management

Educación

Bachelor's degree or equivalent

Herramientas

Vulnerability scanning tools

Descripción del empleo

Apple Information Security seeks an experienced engineering manager to lead the Vulnerability Response team across the United States and EMEIA. You will balance hands-on technical leadership with people management, guiding programs that include subcomponents of Apple's bug bounty program, proactive vulnerability discovery, WAF rule development, emerging threat response, and custom security tooling.

This role is strategic and operational, requiring deep technical expertise and the ability to