You will work cross-functionally with security teams throughout Apple as well as system software, platform design, SOC architects, manufacturing, data center operations, and cloud services teams to develop and integrate best in class hardware, software, and services. You will be responsible for the security of the platform that powers the next generation of data centers.
This position requires someone with strong technical strengths and an enthusiastic drive to secure systems by showing how they can be broken. Our controls have to hold against a remote attacker and against someone with physical access to a chassis who wants a modified machine to look genuine.
We are a dynamic, growing team spanning many disciplines, and we expect members to be willing to step out of their comfort zones to contribute to team objectives. A successful engineer in this role is one that is happy to have a wide breadth of influence as well as deep focus areas in the context of a rapidly evolving project.
7+ years of experience.
Proficiency in C/C++.
Background in developing and maintaining code security-critical codebases.
Understanding of applied cryptography, cryptography hardware, and key management, including PKI and HSM-backed certificate issuance.
Experience with mutual authentication and hardware-based attestation, including Secure Boot, firmware measurement, and challenge-response protocols.
Strong understanding of hardware/software interactions and low-level software.
Background in definition and design of secure embedded systems, and in bringing new hardware platforms from manufacturing into production.
Experience with server component firmware, such as ARM SoC architecture, baseboard management controllers, system-management microcontrollers, and power delivery.
Understanding of past, current, and emerging security exploit types targeting low-level systems, including physical and insider attacks on data center hardware.
Experience building and operating production services that verify security posture across a large fleet and detect drift over time.
Experience with Swift, Objective-C, and Apple development tools.