Sr Software Engineer (Security), Ai & Data Platforms at Apple

Job description

This role is responsible for assessing platform and product security risks by conducting security architecture review and testing of modern application stack deployed on cloud. You will document detailed risk assessment and remediation guidelines for developers and business owners. You will help develop automated tooling leveraging AI to optimize security scanning and testing partnering closely with other security engineers. Bachelors of Science in Computer Science, Cybersecurity or related engineering field 10 years of experience in security engineering, specializing in security testing of modern application technology stacks and designing and implementing preventive and detective security controls. Experience with security testing of one or more public cloud services (e.g. AWS, GCP) Proficient in Python with hands-on experience across Linux and macOS environments Ability to explain basic networking concepts (routing, ACL, load balancers, SSL/TLS, TCP) in order to provide application architecture feedback Background in web application development and/or code auditing Experience with offensive and automation tool development Experience with vulnerability scanning (SAST, DAST) Experience leveraging AI/LLMs for security testing and automation Experience with Kubernetes and container security Experience with common authentication protocols Knowledge of emerging security risks with AI technologies and mitigating controls Ability to work independently and track record of leadership, innovation, responsibility, and creative thinking Experience developing detailed security assessment reports and leading junior engineers and contractors Experience leveraging and customizing open source projects Knowledge of DevOps and CI/CD frameworks Excellent verbal communications skills and ability to work effectively with multi-functional technical and business teams

Requirements

Must-haves

Bachelors of Science in Computer Science, Cybersecurity or related engineering field
10 years of experience in security engineering, specializing in security testing of modern application technology stacks and designing and implementing preventive and detective security controls.
Experience with security testing of one or more public cloud services (e.g. AWS, GCP)
Proficient in Python with hands-on experience across Linux and macOS environments
Ability to explain basic networking concepts (routing, ACL, load balancers, SSL/TLS, TCP) in order to provide application architecture feedback
Background in web application development and/or code auditing
Experience with offensive and automation tool development
Experience with vulnerability scanning (SAST, DAST)
Experience leveraging AI/LLMs for security testing and automation
Experience with Kubernetes and container security
Experience with common authentication protocols
Knowledge of emerging security risks with AI technologies and mitigating controls
Ability to work independently and track record of leadership, innovation, responsibility, and creative thinking
Experience developing detailed security assessment reports and leading junior engineers and contractors
Experience leveraging and customizing open source projects
Knowledge of DevOps and CI/CD frameworks
Excellent verbal communications skills and ability to work effectively with multi-functional technical and business teams

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aiawsgcppythonkubernetesci/cd

Platform: apple
Effort: medium