Senior Security Engineer

Role Number: 200657994-3337

Summary

We are seeking an experienced Security Engineer to play a pivotal role in shaping the security posture of our most critical applications and infrastructure - with a particular focus on AI/ML systems and emerging technologies. In this high-impact role, you will lead sophisticated security assessments, conduct comprehensive threat modeling, and drive security requirements across our technology ecosystem - ensuring that rigorous security is embedded from the ground up.

You will develop repeatable methodologies for evaluating complex systems and emerging technologies, and deliver clear, actionable findings to engineering and business stakeholders. Beyond assessments, you will serve as a strategic partner - influencing engineering teams to build securely and championing a culture of proactive risk management.

Our scope spans all of Apple's application and infrastructure development, new services and technologies, and organizational processes. Our team works cross-functionally with other security teams and development teams, providing security consulting and driving new security initiatives across one of the fastest-moving technology environments.

Description

As a Senior Security Engineer in Apple Information Security, you will:

• Research and identify emerging technologies, threats, and vulnerabilities to proactively define security requirements and controls before they reach production.
• Conduct hands-on security assessments of AI applications and infrastructure, including ML pipelines and agentic systems, identifying vulnerabilities and security risks across the full AI/ML stack.
• Develop techniques, tooling, and automation to support and scale security assessments of AI applications and infrastructure.
• Partner with engineering teams to develop tools and procedures that shift security left in the AI application development lifecycle, enabling teams to identify and remediate risks earlier.
• Evangelize assessment tools, security processes, and proven solutions across engineering teams, driving consistent adoption of security best practices for AI across the organization.

Minimum Qualifications

• Experience conducting security assessments of complex distributed systems, cloud-native applications, and large-scale infrastructure.

• Experience developing security requirements, threat models, or risk assessments for new and emerging technologies.

• Experience applying industry leading security best practices to AI/ML solutions.

• Working knowledge of AI/ML concepts including model training pipelines, inference services, vector databases, agentic systems, and LLM-based applications.

• Understanding of common AI/ML security risks including prompt injection, insecure tool use, data leakage, and supply chain vulnerabilities.

• Strong verbal and written communication skills, with the ability to convey security risk to both technical and non-technical stakeholders.

• BS in Computer Science, Computer Engineering, or Information Security, or 5+ years of equivalent hands-on experience.

Preferred Qualifications

• Experience defining and implementing security requirements and controls for AI infrastructure, tooling, applications, and services.

• Experience developing security tooling or automation leveraging LLMs.

• Experience securing AI agents and emerging agentic protocols such as MCP (Model Context Protocol) or A2A.

• Experience with ML platforms and tooling

• Proven track record securing enterprise platforms, cloud-based solutions, or privacy-focused systems.