Build Security Engineer
Core
Protects Apple's software supply chain and build infrastructure through threat modeling, offensive security assessments, and developing security controls.
Role type
Senior IC build security engineer
Builds
Secure software build pipelines and critical infrastructure
Domain
Software engineering security / DevSecOps
Required skills
threat modeling, offensive security assessments, penetration testing, red teaming, vulnerability research, security control development, cross-functional collaboration, scripting (Python/Bash), container orchestration (Kubernetes)
Preferred skills
LLM safety integration, Go/Perl programming, cybersecurity frameworks (NIST/CIS/SLSA), mentoring, vulnerability remediation
Technologies
Python, Bash, Kubernetes, Go, Perl, NIST, CIS, SLSA
Responsibilities
Conduct threat modeling and security assessments of build infrastructure; Collaborate with engineering teams on security standards; Develop and maintain technical solutions for security risks; Lead penetration tests and red team exercises; Research vulnerabilities in software components; Create security documentation and guidelines.
Seniority
Senior, hands-on IC
