Apple's R&D organizations require a secure and scalable distributed application system, and the Product Engineering Systems team is looking for a Security Engineer to contribute to the development, implementation, and maintenance of security measures within software systems.
Requirements
- Familiarity with security incident response and root cause analysis.
- Knowledge of software development lifecycle (SDLC) security practices.
- Practical experience of integrating and automating security checks into CI/CD pipeline
- Hands-on experience in security technologies and tools, including IAST and DAST.
- Experience with security audits, compliance assessments, and remediation efforts.
- Programming/scripting skills, and ability to read and audit various programming languages, (Java, JavaScript, Python etc)
- Strong knowledge of network security, encryption protocols, access control, and identity management.
Responsibilities
- Software Security Development: Collaborate with the software development team to integrate security best practices into the software development lifecycle. Implement and review secure coding practices to identify and remediate vulnerabilities.
- Threat Modeling: Conduct threat modeling exercises to identify potential security risks in software applications. Work closely with development teams to prioritize and address security concerns based on threat assessments.
- Code Review and Analysis: Perform regular code reviews to identify and mitigate security vulnerabilities. Utilize static and dynamic analysis tools to assess the security posture of software code.
- Incident Response: Assist in responding to security incidents, conducting investigations, and implementing corrective actions. Work collaboratively with the incident response team to improve incident detection and response capabilities.
- Security Awareness: Contribute to security awareness training for software development teams. Stay updated on the latest security trends, vulnerabilities, and industry best practices.
- Analytical & Automation Mindset: We seek candidates with strong analytical skills to effectively address complex security challenges and derive actionable insights. An automation mindset is also valued, as candidates who can automate security processes contribute to efficiency, proactive threat detection, and reduced manual errors.
Other
- Bachelor’s degree in Computer Science, or equivalent practical experience.
- Relevant certifications such as CISSP, CISM, CEH, or CompTIA Security+.
- Ability to work in a fast-paced environment and collaborate with a diverse team.
- Strong analytical skills and ability to derive actionable insights.
- Apple is an equal opportunity employer that is committed to inclusion and diversity.
