Sr Security Operations (SecOps) Engineer

We are looking for an experienced Senior Security Operations (SecOps) Engineer to help define and drive the security strategy for applications cloud infrastructure and engineering platforms. We are particularly interested in a hands-on engineer who can build and integrate reusable security platforms automation and intelligent controls that make security proactive and scalable as software and AI-enabled systems evolve. You will serve as a senior technical security partner to application engineering DevOps Site Reliability Engineering platform engineering and Apple Information Security and Operations Engineering is part of ISu0026T and drives the technology behind Apples global operations sales and supply chain. The team connects the systems that move products from factory to customer bridging sales platforms with the operational infrastructure that keeps Apple running at scale and ensuring Apples technology and business priorities move in lockstep.

In this role you will lead complex security assessments and threat modeling define scalable security controls influence application and infrastructure architecture and develop automation that enables security to be embedded throughout the software development lifecycle. You will identify systemic security risks and create engineering solutions that improve security across multiple applications and teams rather than relying on manual or application-specific controls. You will connect security signals to application ownership business context and engineering workflows so that teams can prioritize and remediate the risks that matter will combine deep security expertise with software cloud and infrastructure engineering experience to help teams design and operate secure systems at scale. You will also evaluate how AI-assisted and agentic workflows can responsibly improve security analysis detection triage and remediation while helping teams manage the new risks introduced by AI-enabled applications and agents.

Lead security architecture reviews threat modeling and risk assessments for complex applications platforms cloud environments and distributed as a senior technical security advisor to application engineering DevOps SRE platform engineering and leadership security architecture patterns engineering standards reusable controls and guardrails that can be adopted across multiple engineering security enforcement points across CI/CD pipelines infrastructure-as-code cloud platforms Kubernetes APIs and application and drive scalable DevSecOps capabilities including SAST DAST software composition analysis container security secrets scanning supply-chain security and policy vulnerability management strategy including discovery risk prioritization remediation guidance exception management and executive-level reporting. Where practical correlate findings with exploitability asset exposure application criticality and ownership to support actionable with designated incident-response and Information Security teams on significant security incidents partnering with engineering and Information Security teams on containment remediation root cause analysis and preventative controls. nDevelop or guide development of security tooling automation and services using Python Go APIs infrastructure-as-code or similar technologies. Own hands-on implementation of selected integrations and production-quality security automation not solely advisory opportunities to replace manual security processes with automated controls and self-service security security architecture for AWS/GCP services Kubernetes platforms containerized workloads networking IAM secrets management and multi-tenant with engineering teams early in product and system design to identify risks before deployment rather than relying primarily on post-production security metrics and risk indicators that provide leadership visibility into application and infrastructure security posture. Emphasize coverage time to remediate critical exposures control effectiveness and measurable risk reductionnot just raw vulnerability new security technologies and lead technical proofs of concept and adoption decisions. Favor interoperability and maintainability over introducing isolated engineers and raise security engineering expertise across SecOps DevOps SRE and application engineering security direction across organizational boundaries without requiring direct management prototype and selectively integrate AI-assisted or agentic capabilities for vulnerability analysis security reviews incident investigation and remediation recommendations. Evaluate accuracy and operational value with least-privilege access auditability and human approval for consequential integrations across source control CI/CD security scanners asset inventories observability and engineering ticketing systems to turn fragmented findings into actionable assess AI/LLM application and agent risks including prompt injection untrusted tool outputs sensitive-data exposure and excessive permissions in collaboration with Information Security and application teams.

8 years of experience in security engineering application security cloud security DevSecOps infrastructure security security operations or a related engineering discipline.n8 years of experience leading security reviews threat modeling risk assessments and remediation of complex distributed or cloud-native systems.n8 years of experience in application security cloud security identity and access management network security vulnerability management and secure software development. n5 years of experience in securing production environments in AWS GCP or another major cloud platform.n 5 years of experience in programming or automation experience (for example Python Go or Java) including building integrations services or repeatable engineering workflows.n5 years of experience in integrating security capabilities into at least one of CI/CD developer workflows infrastructure-as-code or production engineering Degree in Computer Science or equivalent experience.

Experience securing cloud-native applications and workloads including Kubernetes containers APIs and modern distributed experience integrating security controls into CI/CD pipelines and infrastructure-as-code experience integrating or operating several security testing and posture capabilities (e.g. SAST DAST SCA secrets scanning container security or CSPM) with judgment about which controls are useful in different experience designing or developing security automation using Python Go Java Bash or another programming language. Experience building APIs or integrations across security and engineering systems is particularly leading vulnerability assessment prioritization remediation and risk-management activities across multiple engineering to translate complex technical security risks into actionable recommendations for engineers managers and senior ability to influence architecture and security outcomes across multiple engineering building or integrating reusable security controls automation or self-service capabilities adopted by more than one to take an ambiguous security problem from design through a working maintainable technical participating in or leading security incident response investigation root cause analysis and preventative degree in Computer Science Computer Engineering Cybersecurity Information Security or equivalent practical Kubernetes or multi-tenant cloud security identifying security enforcement opportunities within Terraform CloudFormation CI/CD systems Kubernetes admission controls or similar knowledge of threat modeling methodologies offensive security techniques application penetration testing and secure architecture with security tooling and platforms for vulnerability management SAST/DAST secrets management runtime security SIEM and cloud with Splunk OpenSearch Prometheus Grafana or similar observability and security analytics of software supply-chain security SBOM artifact signing provenance dependency security and secure build designing security metrics risk scoring models dashboards and executive-level security securing AI/ML workloads LLM applications model pipelines or agent-based building or directing the use of AI/ML or agentic security tooling to scale security assessment vulnerability analysis incident investigation or to the broader security community through security research CVEs bug-bounty findings open-source projects conference presentations or technical security certifications (e.g. CISSP CCSP CSSLP) are a plus but not a substitute for hands-on engineering experience.