Senior Security Engineer

We are seeking an experienced Security Engineer to play a pivotal role in

shaping the security posture of our most critical applications and

infrastructure - with a particular focus on AI/ML systems and emerging

technologies. In this high-impact role, you will lead sophisticated security

assessments, conduct comprehensive threat modeling, and drive security

requirements across our technology ecosystem - ensuring that rigorous security

is embedded from the ground up. You will develop repeatable methodologies for

evaluating complex systems and emerging technologies, and deliver clear,

actionable findings to engineering and business stakeholders. Beyond

assessments, you will serve as a strategic partner - influencing engineering

teams to build securely and championing a culture of proactive risk management.

Our scope spans all of Apple's application and infrastructure development, new

services and technologies, and organizational processes. Our team works

cross-functionally with other security teams and development teams, providing

security consulting and driving new security initiatives across one of the

fastest-moving technology environments.

DESCRIPTION

As a Senior Security Engineer in Apple Information Security, you will: *

Research and identify emerging technologies, threats, and vulnerabilities to

proactively define security requirements and controls before they reach

production. * Conduct hands-on security assessments of AI applications and

infrastructure, including ML pipelines and agentic systems, identifying

vulnerabilities and security risks across the full AI/ML stack. * Develop

techniques, tooling, and automation to support and scale security assessments of

AI applications and infrastructure. * Partner with engineering teams to develop

tools and procedures that shift security left in the AI application development

lifecycle, enabling teams to identify and remediate risks earlier. * Evangelize

assessment tools, security processes, and proven solutions across engineering

teams, driving consistent adoption of security best practices for AI across the

organization.

MINIMUM QUALIFICATIONS

Experience conducting security assessments of complex distributed systems,

cloud-native applications, and large-scale infrastructure. Experience developing

security requirements, threat models, or risk assessments for new and emerging

technologies. Experience applying industry leading security best practices to

AI/ML solutions. Working knowledge of AI/ML concepts including model training

pipelines, inference services, vector databases, agentic systems, and LLM-based

applications. Understanding of common AI/ML security risks including prompt

injection, insecure tool use, data leakage, and supply chain vulnerabilities.

Strong verbal and written communication skills, with the ability to convey

security risk to both technical and non-technical stakeholders. BS in Computer

Science, Computer Engineering, or Information Security, or 5+ years of

equivalent hands-on experience.

PREFERRED QUALIFICATIONS

Experience defining and implementing security requirements and controls for AI

infrastructure, tooling, applications, and services. Experience developing

security tooling or automation leveraging LLMs. Experience securing AI agents

and emerging agentic protocols such as MCP (Model Context Protocol) or A2A.

Experience with ML platforms and tooling Proven track record securing enterprise

platforms, cloud-based solutions, or privacy-focused systems.