Apple is looking to develop and test security services, maintain secure infrastructure of Identity Aware Proxies and Security Detection Pipelines, and enable actionable Application Program Interface (APIs) and services for triggering responses to security detections.
Requirements
- Implement core security protocols (Specially SSH, mTLS and HTTP), Public Key Infrastructure (PKI), and Identity Aware Proxies (e.g., Envoy), ensuring secure communication channels and enforcing tamper-proof authentication and authorization backed by HSM (Hardware Security Modules) across all of the software development lifecycle supply chain.
- Design, implement, and test security services at scale using Golang, Shell script, Python, and Starlak complying with security policies and software development lifecycle security best practices.
- Oversee and own the full lifecycle of tooling and security services, from architecture design and development to testing and continuous deployment.
- Leverage Bazel, CI/CD pipelines and other Kubernetes-like container orchestration platforms to deploy and manage security services across multiple environments.
- Architect, build, optimize, and maintain security detection pipelines, integrating durable and volatile data streams via multiple tools and data sources (e.g., Splunk, Databricks, Jupyter Notebooks, SQL and NoSQL Databases) with security detection pipelines to automate security incident response workflows.
- Design and implement tooling, APIs and Services that enable fast automated security responses, integrating with new and existing detection pipelines and other security services for automated fast threat mitigation.
- Collaborate with SREs to enhance service observability and operational efficiency, utilizing tools including Prometheus or Grafana or Splunk to achieve high-availability monitoring and reduce infrastructure incident response times by refining SLAs through telemetry and performance metrics.
Responsibilities
- Develop and test security services (new and existing) and documents security services for other developers.
- Utilizes specialized knowledge of security services internal to Apple to evolve and maintain secure infrastructure of Identity Aware Proxies and Security Detection Pipelines.
- Deploys new and existing services into test and production environments.
- Review and add new telemetry and monitoring capabilities for security services.
- Updates test and deployment pipelines for security services.
- Responds to service failures and intermittent performance issues, and identifies and improves KPIs for core security services.
- Utilizes specialized knowledge of the platforms internal to Apple where security services are deployed.
Other
- 40 hours/week.
- Bachelor's degree or foreign equivalent in Computer Science or a related field and 4 years of experience in the job offered or related occupation.
- Apple is an equal opportunity employer that is committed to inclusion and diversity.
- We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics.
