JobCubby JobCubby
Sign up
Apple

Senior Security Engineer - Strategic Risk

Apple Seattle, Washington, United States

Computers and Electronics Manufacturing · 10,001+ employees

10 h ago
security Senior (5-10 yrs) Full-time United States
Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.

About the role

You will act as the primary security point of contact for large engineering efforts, conducting security reviews and developing threat models. Additionally, you will define and automate security improvements to protect customer data and infrastructure.

What they look for

Security Engineering Threat Modeling Incident Response Cloud-native Architecture Applied Cryptography Access Control Authentication Frameworks Splunk OSQuery Threat Intelligence Security Reviews Automation Risk Assessment Data Security Infrastructure Security

Requirements

Candidates must have 7 or more years of experience in security engineering, incident response, or threat modeling. Expertise in cloud-native architecture, applied cryptography, and enterprise log analysis platforms is required.

Full description

The Apple Services Engineering Security team builds and provides secure systems and infrastructure that fuel Apple’s services (such as iCloud, iTunes, Siri, App Store, and Maps). As part of the ASE Security team, you will help manage the security needs of Apple’s services around the world. You will build and integrate the security controls, guardrails, and frameworks that help protect our customers data in Apple’s infrastructure. Your work will help build solutions to a variety of outstanding security risks to Apple systems and data. Join us, and you’ll play a meaningful role in ensuring the highest standard of security for one of the most-watched companies in the world.

Description

In this role, you will be the primary security team point of contact for several large engineering efforts. You will work with engineering teams throughout their development lifecycle. You will conduct security reviews, post incident reviews, develop threat models, and use the insights from these engagements to build scalable methodologies. You will help define, automate and advocate for application level and platform-wide security improvements with a focus on risks to customer accounts and data. You will play a hands on role in ensuring that programs are reviewed, adjusted, implemented and tested appropriately.

Minimum Qualifications

7 or more years conducting security reviews, incident response, threat modeling, or security engineering Demonstrated ability to design, document, and implement new security processes Understanding of cloud-native architecture and managed platform service (eg. compute, storage, networking, databases) Expertise in threat modeling, operational threat intelligence, and common attack vectors and frameworks. Understanding of applied cryptography, access control, modern authentication frameworks, and other security mechanisms Experience with enterprise log collection and analysis platforms (e.g., Splunk, OSQuery)

Preferred Qualifications

Experience with threat hunting, insider risk and/or investigations Experience working with data engineers to define metrics and interpret results from detection and risk models Experience in applying and experimenting with AI/ML, to solve security related use-cases

Similar roles