Security Domain Expert, Perimeter and Network Security, Enterprise Technology Services

At Apple new insights often become revolutionary products services and customer experiences very quickly. Bring passion and dedication to your job and theres no telling what you could accomplish. The Emerging Technologies team within ISu0026T specializes in building forward-looking extremely scalable systems and solutions in two areas: Information Security and general-purpose reusable platforms in the space of Integration and Orchestration. The team has a passion for solving challenging problems exploring new domains and engineering transformational solutions. We operate with a startup mindset lean teams high ownership and technical leaders who flex across domains to build and scale new capabilities.

The Emerging Technologies team is seeking a Security Domain Expert to serve as the outward face and technical authority of Apples perimeter and network security platform. You will represent the team across Apple in architecture forums security reviews and leadership briefings bringing deep expertise in perimeter security proxy technologies and threat mitigation to every role requires hands-on experience with the technologies at the heart of our platform proxies origin edge application load balancers service mesh API u0026 AI security gateways WAF DDoS mitigation bot prevention TLS termination/origination and security policy enforcement across protocols (TCP UDP HTTP/HTTPS). You will apply that expertise to advise partner teams on how our security capabilities address their traffic and security challenges and to represent the teams technical perspective in cross-organizational will also serve as the bridge between our engineering team and the broader Apple ecosystem working directly with application teams to understand their security requirements synthesizing cross-team needs to inform platform strategy and roadmap and translating technical security concepts into clear narratives for leadership. This role spans deep technical engagement with security and infrastructure teams through to executive communication in equal measure.n

Serve as the domain authority for perimeter and network security across the Emerging Technologies organization providing expert guidance on WAF DDoS mitigation bot prevention TLS management real-time threat intelligence and security policy enforcement across proxy the security platform in architecture forums security reviews cross-organizational reviews and leadership briefings serving as the teams technical voice in all external application teams across Apple on their traffic patterns and security requirements articulating how the platforms capabilities across edge proxies origin/application load balancers service mesh and API u0026 AI security gateways address their specific emerging threats attack vectors and defensive technologies bring industry perspective to shape the teams security strategy and keep Apples defenses at the alignment on cross-organizational security initiatives build consensus on priorities trade-offs and sequencing for efforts that require coordinated action across security infrastructure SRE cloud and application cross-team intelligence bring insights from partner engagements and organizational priorities back to the engineering team to inform and influence platform strategy and roadmap with the platform architect and engineering managers to ensure the teams technical direction defense-in-depth strategy threat coverage and platform evolution across on-premises and cloud environments (GCP AWS) reflects real-world security to technical design reviews and security architecture discussions bringing the external perspective of partner team requirements and cross-organizational gaps in cross-organizational security coverage; proactively recommend solutions and drive remediation in partnership with the engineering complex perimeter security concepts into clear compelling narratives for audiences ranging from engineers to senior and elevate team members in security domain knowledge cross-functional engagement and stakeholder communication.

Bachelors degree in Computer Science Computer Engineering Cybersecurity or equivalent technical discipline.n12 years of experience in security engineering or security architecture with a strong hands-on technical expertise in perimeter and network security WAF design DDoS mitigation strategies bot detection techniques TLS/mTLS TCP/IP HTTP/HTTPS and DNS understanding of proxy technologies (NGINX Envoy HAProxy) across edge origin service mesh and API gateway tiers including how security controls are implemented and enforced at the proxy layer.n Experience with security policy enforcement and configuration management across distributed infrastructure at with systems that span on-premises data centers and public cloud environments (GCP AWS).nProven experience representing a security team as a domain authority in architecture reviews security forums executive briefings and cross-organizational working directly with application and infrastructure teams to understand their traffic and security requirements and design integrated to communicate complex security topics with equal clarity to engineers and senior record of influencing security direction and outcomes across organizational boundaries without direct management written and verbal communication skills.

* M.S. in Computer Science Computer Engineering Cybersecurity or Information Security.n* Experience with proxy engine internals C C Lua or WASM-based customization of NGINX Envoy or similar engines for implementing security controls in the runtime data path.n* Experience with L4/L7 proxy architectures protocol-level security and load balancing strategies.n* Understanding of orchestration/control plane systems for security policy distribution and lifecycle management at fleet with OWASP threat models CVE analysis threat landscape trends and security incident response from an engineering with service mesh architectures (Istio Envoy-based) API u0026 AI security gateway patterns and containerization (Kubernetes Docker).nKnowledge of real-time threat intelligence distribution and event-driven security telemetry at contributions to the security community conference talks published research open-source contributions or patents.