Senior Security Engineer - Strategic Risk

Responsibilities

• Serve as the primary security team point of contact for several large engineering efforts.
• Conduct security reviews, post-incident reviews, and threat modeling throughout the development lifecycle.
• Design, document, implement, automate, and advocate for scalable security processes and application- and platform-wide security improvements.
• Address security risks involving customer accounts, customer data, and Apple infrastructure.
• Ensure security programs are reviewed, adjusted, implemented, and tested appropriately.

Requirements

• At least 7 years of experience conducting security reviews, incident response, threat modeling, or security engineering.
• Ability to design, document, and implement new security processes.
• Understanding of cloud-native architecture and managed platform services, including compute, storage, networking, and databases.
• Expertise in threat modeling, operational threat intelligence, and common attack vectors and frameworks.
• Understanding of applied cryptography, access control, modern authentication frameworks, and other security mechanisms.
• Experience with enterprise log collection and analysis platforms such as Splunk and OSQuery.
• Preferred experience with threat hunting, insider risk, investigations, security metrics, detection models, risk models, and applying AI/ML to security use cases.