Security Engineer Driftwatch

You will be part of the foundational team who partner with security engineering teams to determine the data-driven insights and automations we need to build to enforce security in variants and policies in a continuous fashion in order to provide high confidence in the integrity of our frontline mitigations and boundaries. Once regressions or violations are detected the team is also responsible for ensuring we’ve built the right relationships agreements and processes to efficiently get these fixed as quickly as a small team of passionate engineers who thrive in a fast-paced environment driven by unique and novel challenges and deliver things that go beyond what traditional automation could do.

You will be working alongside a wide variety of teams and your influence will be felt throughout Apple’s extraordinary products including: the iPhone Apple Vision Pro Mac and Apple TV. We’re looking for someone with a strong understanding of security engineering principles software delivery and secure SDLC; and an understanding of the engineering challenges organisational dynamics and the process trade-offs of building a continuous security capability.

If you enjoy creative critical and independent thinking we’ve love to hear from a job as diverse as it is crucial. Your responsibilities will also include harnessing a vast array of available build data (dynamic and static) to derive meaningful security insights learning how our software is built end-to-end at Apple to determine the most impactful intervention points partnering with infrastructure engineers to get your automations deployed to production and helping engineers that work on Apple products to make better - more secure - choices during position may require some travel to other Apple sites vendors and security conferences.

• Experience building and integrating security-enforcing controls across the full software lifecycle
• Programming background in Python Swift C C and / or Objective-C
• Knowledge of OS security fundamentals including contemporary mitigation techniques and vulnerability classes
• Exceptional ability to communicate clearly and effectively about technical topics (verbal and written)
• Knowledge of macOS and iOS security architectures
• Knowledge of observability tools and techniques
• Experience building visualisations for complex technical information
• Enthusiasm for new technologies and growth
• Experience driving security projects to identify software regressions
• Experience with CI / CD integrations binary analysis telemetry analysis build verifiers IDE and compiler security plug-ins and / or engineer security training

Splunk,IDS,Network security,Computer Networking,Identity & Access Management,PKI,PCI,NIST Standards,Security System Experience,Information Security,Encryption,Siem

Employment Type:

Full Time

Experience:

years

Vacancy: 1