Job description

As a Systems & Kernel Software Engineer in SPEAR, you will partner with teams across the lower layers of the software stack to design security defenses that meaningfully improve the security of Apple devices. Working in a small team of SPEAR engineers, you will collaborate on a design that upholds a high security standard without compromising on system performance or user experience. Then, you will go hands-on. You and your team will ramp up on the partner team's codebase and implement the design. A day on the job might involve: - Designing the hardening approach for a given codebase, from surgical adoptions of memory safety technologies, to mitigation deployment, to broad refactors that reorient key system components. - Ramping quickly on unfamiliar codebases and writing production-quality low-level code in C, C++, or Swift. - Balancing security goals against the realities of working on code that ships to hundreds of millions of devices: performance, memory footprint, compatibility, and reliability. - Testing thoroughly, debugging carefully, and partnering with QA on end-to-end validation. - Using modern tooling, including LLMs, where it helps us move faster, while applying the systems and security depth needed to evaluate what those tools produce. - Creating the documentation and training materials the partner team needs to maintain and build on the changes. BS in Computer Science or a related field, or equivalent experience. Working knowledge of C and expertise in one or more systems programming languages (C, C++, Rust, Zig, or Swift). Experience writing low-level software, such as kernels, drivers, firmware, bootloaders, hypervisors, or runtimes. Understanding of how low-level code is compiled to machine code and interacts with hardware. Experience with, or an interest in, software security. Strong written and verbal communication. Understanding of the security properties of common systems languages. Understanding of common vulnerability exploitation and mitigation techniques. Experience designing, implementing, or evaluating software security mitigations. Deep expertise in C programming. Experience using LLMs to accelerate security engineering. Experience with compiler security features, static analysis, or fuzzing. Contributions to open-source systems or security projects.

Requirements

Must-haves

Then, you will go hands-on. You and your team will ramp up on the partner team's codebase and implement the design.
Designing the hardening approach for a given codebase, from surgical adoptions of memory safety technologies, to mitigation deployment, to broad refactors that reorient key system components.
Ramping quickly on unfamiliar codebases and writing production-quality low-level code in C, C++, or Swift.
Balancing security goals against the realities of working on code that ships to hundreds of millions of devices: performance, memory footprint, compatibility, and reliability.
Testing thoroughly, debugging carefully, and partnering with QA on end-to-end validation.
Using modern tooling, including LLMs, where it helps us move faster, while applying the systems and security depth needed to evaluate what those tools produce.
Creating the documentation and training materials the partner team needs to maintain and build on the changes.
BS in Computer Science or a related field, or equivalent experience.
Working knowledge of C and expertise in one or more systems programming languages (C, C++, Rust, Zig, or Swift).
Experience writing low-level software, such as kernels, drivers, firmware, bootloaders, hypervisors, or runtimes.
Understanding of how low-level code is compiled to machine code and interacts with hardware.
Experience with, or an interest in, software security.
Strong written and verbal communication.
Understanding of the security properties of common systems languages.
Understanding of common vulnerability exploitation and mitigation techniques.
Experience designing, implementing, or evaluating software security mitigations.
Deep expertise in C programming.
Experience using LLMs to accelerate security engineering.
Experience with compiler security features, static analysis, or fuzzing.
Contributions to open-source systems or security projects.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

goswiftrust

Platform: apple
Effort: medium