The Apple Services Engineering Security team builds and provides secure systems and infrastructure that fuel Apple's services (such as iCloud, iTunes, Siri, App Store, and Maps). As part of the ASE Security team, you will help manage the security needs of Apple's services around the world. You will build and integrate the security controls, guardrails, and frameworks that help protect our customers data in Apple's infrastructure. Your work will help build solutions to a variety of outstanding security risks to Apple systems and data. Join us, and you'll play a meaningful role in ensuring the highest standard of security for one of the most-watched companies in the world. In this role, you will work with highly skilled security professionals passionate about identifying, assessing, and mitigating security risks. This role is central to the controls that protect Apple's customers, data, and brand. You'll have the opportunity to design security processes and technology with a truly global impact. Combining aspects of solutions engineering, design review, architecture, analysis and technical program management you will help identify and surface risks, and then help develop short and long term roadmaps to address it. You will play a hands on role in ensuring that programs are reviewed, adjusted, implemented and tested appropriately.Help define a strategy and vision for uplifting security in critical services Lead discovery conversations to understand architecture, current security posture, and blockers to adoption Measure and communicate risks to leaders and stakeholders Develop and implement AI technologies to manage risk Perform post-incident reviews Research and identify emerging technologies, threats, and vulnerabilities to proactively define security requirements and controls before they reach production.BS in Computer Science, Computer Engineering, or Information Security, or 5+ years of equivalent hands-on experience Knowledge of security architecture and secure design principles Demonstrated ability to design, document, and implement new security processes. Experience conducting security assessments of complex distributed systems, cloud-native applications, and large-scale infrastructure An understanding of past, current, and emerging security exploit trends Understanding of exploit development and conditions required to trigger different vulnerability typesExperience evaluating and building threat models for complex services Experience applying AI/ML techniques to analyze CVEs and prioritize high-risk vulnerabilities. Experience working with data engineers to define metrics and interpret results from detection and risk models. Knowledge of authentication mechanisms, including OAuth, SAML, and other identity management protocols
We’re a diverse collection of thinkers and doers, continually reimagining what’s possible to help us all do what we love in new ways. The people who work here have reinvented entire industries with the Mac, iPhone, iPad, and Apple Watch, as well as with services, including iTunes, the App Store, Apple Music, and Apple Pay. And the same passion for innovation that goes into our products also applies to our practices — strengthening our commitment to leave the world better than we found it.
There’s a place here for every kind of brilliant. Everyone here is an innovator, or an innovator-to-be, no matter what your team or your role. So bring your passion, courage, and original thinking and get ready to share it, because every new product, service, or feature we invent is the result of people working together to make each others’ ideas stronger. Innovation at this level depends on people who represent the variety of the human experience and inspire us with their own fresh perspectives. Together, we’ll do amazing work that can make a difference in people’s lives. Including your own. Learn more about working at Apple.