Security Tooling Software Engineer, SEAR

As part of Apples Security Engineering u0026 Architecture (SEAR) organization youll join our mission to create the worlds most secure products. We are committed to creating groundbreaking tools that enable our security researchers to delve deep into our numerous codebases and frameworks to identify any security concerns are seeking a motivated individual to explore and improve our offensive security capabilities with a strong emphasis on designing developing and deploying state-of-the-art tools using a broad range of analysis approaches.n

You will collaborate closely with an extraordinary team of vulnerability researchers to gain a deep understanding of the attack surface across Apples full stack from silicon and boot ROMs to firmware kernels and user the primary focus you will design develop maintain and enhance security analysis tools. Using a wide range of static dynamic and AI techniques on both source code and binaries you will create and contribute to innovative solutions for unique security challenges and scalable solutions to efficiently analyze sophisticated systems. Your work will directly amplify the teams impact on variant analysis and regression prevention and it will empower researchers with groundbreaking tools for vulnerability will also partner with other security researchers applying offensive tooling to real-world security evaluations. This hands-on application will demonstrate tools effectiveness and provide valuable feedback for continuous improvement. Your contributions will directly impact our ability to proactively secure Apple will consider applicants for both in-office and remote roles depending on candidate experience.n

Strong programming skills (C/C Python Swift/Rust)nProven experience in security-oriented tool development and real-world usage (static/dynamic approaches source/binary analysis)nAutonomous drive and collaborative mindset

Understanding of vulnerability research tools and methodologiesnExperience with DevOps and related environmentsnLow-level understanding of security mitigations deployed in at least one major operating system

Required Experience:

IC