Sr Software Engineer (Security), Ai & Data Platforms
Apple
- Location
- Onsite (Austin, Texas)
- Employment
- Full-time
- Level
- Senior Level
Posted 2 days ago
About the role
Apple's AI & Data Platforms security engineering team is seeking a senior engineer to assess platform security risks and build agentic capabilities for secure AI platforms. The role focuses on conducting architecture reviews, testing modern cloud stacks, and developing automated security tooling.
Skills
Security Engineering
Application Security
Python
Cloud Security
AWS
GCP
Linux
MacOS
Networking
Vulnerability Scanning
SAST
DAST
Kubernetes
Container Security
AI
LLMs
Full job details
At Apple, great ideas have a way of becoming extraordinary products, services, and customer experiences. Are you passionate building best-in-class cybersecurity services that empower engineering teams? Do you want to work in a highly energized and innovative environment where you work at the cutting edge of AI and Cybersecurity? If so, AI & Data Platforms org is looking for engineers like you!
You will be part of Apple’s security engineering team in a unique organization enabling secure AI platforms. You will be joining a team of highly-skilled and passionate security engineers working on this groundbreaking space. In this role you will conduct application security assessments, provide security guidance to engineering and build agentic capabilities to transform and accelerate security assurance.
This role is responsible for assessing platform and product security risks by conducting security architecture review and testing of modern application stack deployed on cloud. You will document detailed risk assessment and remediation guidelines for developers and business owners. You will help develop automated tooling leveraging AI to optimize security scanning and testing partnering closely with other security engineers.
Bachelors of Science in Computer Science, Cybersecurity or related engineering field 10 years of experience in security engineering, specializing in security testing of modern application technology stacks and designing and implementing preventive and detective security controls. Experience with security testing of one or more public cloud services (e.g. AWS, GCP) Proficient in Python with hands-on experience across Linux and macOS environments Ability to explain basic networking concepts (routing, ACL, load balancers, SSL/TLS, TCP) in order to provide application architecture feedback Background in web application development and/or code auditing
Experience with offensive and automation tool development Experience with vulnerability scanning (SAST, DAST) Experience leveraging AI/LLMs for security testing and automation Experience with Kubernetes and container security Experience with common authentication protocols Knowledge of emerging security risks with AI technologies and mitigating controls Ability to work independently and track record of leadership, innovation, responsibility, and creative thinking Experience developing detailed security assessment reports and leading junior engineers and contractors Experience leveraging and customizing open source projects Knowledge of DevOps and CI/CD frameworks Excellent verbal communications skills and ability to work effectively with multi-functional technical and business teams
Description
This role is responsible for assessing platform and product security risks by conducting security architecture review and testing of modern application stack deployed on cloud. You will document detailed risk assessment and remediation guidelines for developers and business owners. You will help develop automated tooling leveraging AI to optimize security scanning and testing partnering closely with other security engineers.
Minimum Qualifications
Bachelors of Science in Computer Science, Cybersecurity or related engineering field 10 years of experience in security engineering, specializing in security testing of modern application technology stacks and designing and implementing preventive and detective security controls. Experience with security testing of one or more public cloud services (e.g. AWS, GCP) Proficient in Python with hands-on experience across Linux and macOS environments Ability to explain basic networking concepts (routing, ACL, load balancers, SSL/TLS, TCP) in order to provide application architecture feedback Background in web application development and/or code auditing
Preferred Qualifications
Experience with offensive and automation tool development Experience with vulnerability scanning (SAST, DAST) Experience leveraging AI/LLMs for security testing and automation Experience with Kubernetes and container security Experience with common authentication protocols Knowledge of emerging security risks with AI technologies and mitigating controls Ability to work independently and track record of leadership, innovation, responsibility, and creative thinking Experience developing detailed security assessment reports and leading junior engineers and contractors Experience leveraging and customizing open source projects Knowledge of DevOps and CI/CD frameworks Excellent verbal communications skills and ability to work effectively with multi-functional technical and business teams