Build and Compute Systems Security Reviewer, SEAR

Embedded within Apple’s Security Engineering & Architecture organization, the Secure Design team’s mission is to ensure that the software we ship to our customers is secure. We believe that when it comes to building the world's most secure operating systems, collaboration is key. We're looking for a talented and inspired individual to join the group responsible for threat modeling and security review of complex platforms such as Private Cloud Compute and Apple's software build system. Working with some of the best engineers in the world, your influence will have a direct positive impact on the security of Apple's extraordinary products, including iPhone, iPad, Mac, Vision Pro, Apple Watch, and Apple TV. From consulting on both hardware and software, threat modeling, auditing code and reviewing designs, the job is as diverse as it is critical. This position requires someone with strong technical abilities and a passionate desire to secure systems by showing how they can be broken. We design and secure software and infrastructure that affects for hundreds of millions of users. We make products that people LOVE. We are committed to user privacy and security. We have some of the most creative, passionate, hardworking engineers in the industry. We challenge each other to go beyond the norm to find new, innovative ways of solving problems and to make software safer, easier, and more fun to use.

Description

You will be a technical lead responsible for securing high priority systems including build and signing infrastructure and private cloud compute.

Work cooperatively with other parts of Apple on a broad range of technologies and initiatives to enhance security.

Design new and innovative ways of utilizing secure compute infra while preserving engineering ease-of-use and development velocity.

Work with engineers to analyze systems, threat model new components, identify security vulnerabilities in implementation, and recommend security controls to ensure security and integrity.

Evangelize and drive the adoption of these technologies across the organization.

Lead ground breaking security efforts at a scale only found at Apple.

Minimum Qualifications

Proficient in security architecture design and review of complex server/infrastructure projects
Familiarity with creating threat models for complex software products
Influences and collaborates with colleagues (engineering teams) and decision makers to develop secure solutions and to accomplish security goals
An understanding of past, current, and emerging software supply chain attacks/threats

Preferred Qualifications

Experience applying security engineering to software build and delivery pipelines
Excellent at multitasking, organizing, and prioritizing complex projects to meet deadlines
Background in secure coding, code auditing, and software security testing
Experience designing high availability systems incorporating confidential compute, HSMs, and similar components.
Proficiency in macOS and/or Linux internals and modern mitigation techniques
Programming background in Objective-C, Python, Ruby, Swift, or other similar language