AI Security Engineer Red Team

We are the Apple Services Engineering (ASE) Security Red Team. We focus on deep technical security review work of critical ASE services and infrastructure. These security reviews will be scoped and focused on review depth and quality. We are growing our team and looking an AI Security Engineer to lead deep reviews that identify meaningful security improvement this role you will work closely with the security engineering InfoSec privacy SRE detection and design review teams to keep Apples services secure for our users. You will identify security weaknesses validate and design detection mechanisms and provide actionable recommendations to enhance our security posture. You will go beyond simple to find risks and identify obscure and complex risks within complex services. You will collaborate with various architecture and engineering teams to continuously validate and improve our security controls and detection capabilities with a strong focus on developing repeatable testing frameworks and metrics-driven security improvements. If you love diving into complex and important systems and driving the security of that system over time we want to talk to you!

In this role you will scope and lead focused security reviews on critical internet scale applications and supporting infrastructure. You will learn the services architecture and risk profile to build a scope that enables a meaningful security review. You will use AI to expedite all stages of your work while maintaining accountability for all outcomes. You will use your depth of knowledge to identify risks that go undetected by agentic tools and processes to reinforce and improve those processes.

Responsible for the enumerating risks planning reviews and executing those reviews to identify vulnerabilities and improvement opportunitiesnA technical expert in uncommon and obscure risksnA technical expert in complex business logic risks that require a depth of understanding of the services and their architecturesnAbility to identify areas that are ripe for improvement and establish appropriate security goalsnCurrent on new security technologies vulnerabilities and methodologiesnAbility to develop proof of concept systems to automate security recommendations vulnerability discovery and process workflowsnAbility to effectively use AI within your workflowsnAbility to identify areas of security risk that require additional focus and review after AI has performed initial reviewsnAbility to contribute improvement opportunities to AI tool and process engineering teams

6 years in an information security field or software engineering; 2 or more of those years conducting security reviewsn2 years of manually reviewing source code to assist in finding vulnerabilitiesnExperience building or contributing to AI security toolsnExtensive infrastructure cloud and application security experiencenExperience communicating risk to engineering and leadership teamsnExperience going deep on complex systems for extended engagements

Bachelors degree in Computer Science / Engineering with emphasis in security related fields (or equivalent experience)nExperience constructing threat scenario narratives and building exploit chainsnCommunity contributions like public CVEs bug bounty recognition open source tools blogs talks etc.