Security Engineer
Core
Building server-side security solutions for Apple platforms (iOS, Mac) to secure hardware manufacturing ecosystems and global IT infrastructure.
Role type
Senior IC Security Engineer (Offensive/Defensive)
Builds
Secure software and hardware platforms for billions of Apple customers
Domain
Consumer electronics, cybersecurity, secure hardware/software integration
Required skills
Penetration testing, vulnerability assessment, static code analysis, reverse engineering, forensic analysis, secure coding practices, cryptography, system administration, LLM application for security tools
Preferred skills
Red teaming, blue teaming, exploit development, CTF experience, secure boot mechanisms, secure firmware updates
Technologies
LLM frameworks, static analysis tools, penetration testing frameworks, reverse engineering tools
Responsibilities
Perform penetration testing and vulnerability assessments on software applications, API services, and infrastructure; Develop and execute new test plans, methodologies, and tools for assessing hardware and software security; Conduct static code analysis to identify and triage application security issues; Work closely with DevOps and engineering teams to remediate application security vulnerabilities and implement security best practices throughout the SDLC; Assist in application and infrastructure security reviews to identify gaps in best practices, and collaborate with stake holder teams to improve security posture; Perform reverse engineering and forensic analysis to identify security vulnerabilities and its exploitability; Rotate between red and blue functions and conduct simulated attacks & defence; Develop security strategies, frameworks, tools, and processes to assess and improve security posture of the organisation; Collaborate with hardware design teams to integrate security best practices during product development; Document findings, prepare comprehensive reports, and provide detailed security recommendations for remediation; Fulfill on-call responsibilities for handling security-related incidents; Leverage LLM technologies to create security testing and investigation tools; Continuous learning and conduct security research to stay updated on the latest threats, vulnerabilities, attack vectors, and mitigation techniques.
Seniority
Senior, hands-on IC
