Sr Security Incident Response Engineer, AIS
Core
Senior engineer leading end-to-end investigation, containment, and remediation of global security incidents for Apple.
Role type
Senior IC security incident response engineer
Builds
Durable incident response capabilities (detections, queries, automations) and global response processes
Domain
Information Security / Cybersecurity Incident Response
Required skills
Incident response lifecycle management, hypothesis testing, root cause analysis, threat modeling, incident response automation, programming/scripting, mentoring, raw telemetry analysis, attacker tradecraft understanding, malware analysis, digital forensics, intrusion detection
Preferred skills
AI application in IR processes, modern identity management, cloud control planes, SaaS platforms, CI/CD environments, operational threat intelligence
Technologies
Endpoint/OS internals, cloud control planes, SaaS platforms, corporate IT infrastructure, developer/CI-CD environments
Responsibilities
Own incidents end to end from identification to resolution; Mentor and grow other responders; Build durable capability from one-off investigations; Analyze at scale using raw telemetry; Influence beyond the team as a technical advisor; Collaborate globally across time zones
Seniority
Senior, hands-on IC with mentorship responsibilities
