Security Software Engineer, Enterprise Technology Services

Apple is where individual imaginations gather together committing to the values that lead to great work. Every new product we build service we create or Apple Store experience we deliver is the result of us making each others ideas stronger. That happens because every one of us shares a belief that we can make something wonderful and share it with the world changing lives for the better. Its the diversity of our people and their thinking that inspires the innovation that runs through everything we do. When we bring everybody in we can do the best work of our lives. Here youll do more than join something youll add something. nnThere is a lot that goes into building the most secure yet user-friendly devices in the world. We are a unique Software Development group with a charter to secure our platforms which include iOS software iOS Devices and Mac. We build solutions that are used by our customers engineering teams and manufacturing environments. We are looking for a candidate who is passionate about both software and hardware security and enjoys highly technical hands-on role in a dynamic and fast paced environment. This role will be responsible for testing and securing the Software Development Life Cycle world-wide hardware manufacturing ecosystem and associated global IT a member of our fast-paced group you will have the unique and rewarding opportunity to shape and improve the software that allows our products to surprise and delight billions of Apples customers every day! If youre excited by the idea of making a real impact and joining a team where we pride ourselves in being one of the most diverse and inclusive companies in the world a career with Apple will be your dream job!

Our organization provides security server-side solution to enable various Apple product security features. As part of security team in this group we are looking for someone who can drive advancements in security practices proactively identifying security vulnerabilities fortifying our platforms against emerging threats and enabling continuous innovation. The existing scope of the work includes the following and will be expanded with emerging new technology and new business initiatives.

Perform penetration testing and vulnerability assessments on software applications API services and infrastructure. nDevelop and execute new test plans methodologies and tools for assessing hardware and software security. nConduct static code analysis to identify and triage application security issues. nWork closely with DevOps and engineering teams to remediate application security vulnerabilities and implement security best practices throughout the Software Development Life Cycle (SDLC) nAssist in application and infrastructure security reviews to identify gaps in best practices and collaborate with stake holder teams to improve security posture nPerform reverse engineering and forensic analysis to identify security vulnerabilities and its exploitability. nRotate between red and blue functions and conduct simulated attacks u0026 defense. nDevelop security strategies frameworks tools and processes to assess and improve security posture of the organization. nCollaborate with hardware design teams to integrate security best practices during product development. nDocument findings prepare comprehensive reports and provide detailed security recommendations for remediation. nFulfill on-call responsibilities for handling security-related incidents. nContinuous learning and conduct security research to stay updated on the latest threats vulnerabilities attack vectors and mitigation techniques.

4 years of experience with fundamental IT domains including Networking Operating Systems Security Principles Secure Coding Practices Cryptography and System of infrastructure security and physical security best practicesnUnderstanding of software development and secure coding best diversity and inclusiveness in a global organization with ability to collaborate and communicate effectivelynAbility to analyze complex problems explore the greenfield and devise creative team player with adaptabilitynBachelor Degree or equivalent work experience.

Knowledge in reverse engineering and exploit development especially with hands-on experience in security penetration testing red team exercises Capture The Flag (CTF) competitions or security related of cryptographic algorithms secure boot secure firmware update mechanisms is a plus.