Build and Compute Systems Security Reviewer, SEAR

Embedded within Apples Security Engineering u0026 Architecture organization the Secure Design teams mission is to ensure that the software we ship to our customers is secure. We believe that when it comes to building the worlds most secure operating systems collaboration is key. Were looking for a talented and inspired individual to join the group responsible for threat modeling and security review of complex platforms such as Private Cloud Compute and Apples software build system. Working with some of the best engineers in the world your influence will have a direct positive impact on the security of Apples extraordinary products including iPhone iPad Mac Vision Pro Apple Watch and Apple TV. From consulting on both hardware and software threat modeling auditing code and reviewing designs the job is as diverse as it is critical. This position requires someone with strong technical abilities and a passionate desire to secure systems by showing how they can be design and secure software and infrastructure that affects for hundreds of millions of users. We make products that people LOVE. We are committed to user privacy and security. We have some of the most creative passionate hardworking engineers in the industry. We challenge each other to go beyond the norm to find new innovative ways of solving problems and to make software safer easier and more fun to use.

You will be a technical lead responsible for securing high priority systems including build and signing infrastructure and private cloud cooperatively with other parts of Apple on a broad range of technologies and initiatives to enhance new and innovative ways of utilizing secure compute infra while preserving engineering ease-of-use and development with engineers to analyze systems threat model new components identify security vulnerabilities in implementation and recommend security controls to ensure security and and drive the adoption of these technologies across the ground breaking security efforts at a scale only found at Apple.

Proficient in security architecture design and review of complex server/infrastructure projectsnFamiliarity with creating threat models for complex software productsnInfluences and collaborates with colleagues (engineering teams) and decision makers to develop secure solutions and to accomplish security goals nAn understanding of past current and emerging software supply chain attacks/threats

Experience applying security engineering to software build and delivery pipelinesnExcellent at multitasking organizing and prioritizing complex projects to meet deadlinesnBackground in secure coding code auditing and software security testingnExperience designing high availability systems incorporating confidential compute HSMs and similar in macOS and/or Linux internals and modern mitigation techniquesnProgramming background in Objective-C Python Ruby Swift or other similar language