Director of Security Engineering

The Apple Service Engineering (ASE) team builds and provides systems and infrastructure that fuel Apple's services (such as Apple TV, App Store, Apple Music, Apple Fitness, iCloud, Siri, and Maps). We are the foundation on which Apple's software developers build the products that our customers love. Our services have to scale globally, stay highly available, and meet the high security expectations for our billions of customers. The Security team within ASE is seeking a Director of Security Engineering to lead and mature our security assurance programs. This is a critical leadership role where the successful leader will: - Establish scalable processes to empower developers in building secure products and services. - Drive the development of tooling, automation, and frameworks that enable teams to build with strong security foundations. - Lead and oversee the Services red team, detection engineering team and design review team with the goal of enhancing security across the organization. The ideal candidate has experience in cloud security, internet security, and a deep understanding of the current and emerging threat landscapes to protect our business, customers, and data.

Description

As the Director of Security Engineering for ASE, you will lead and inspire a world-class team of security engineers. You will be a key member of the security leadership team, responsible for setting and executing the strategic vision for security across Apple Services Engineering systems. You will ensure that security is a fundamental consideration in every aspect of our work, from the initial design of our systems to the deployment and the infrastructure that supports it. You will also play a meaningful role in collaborating with Apple's other security teams to define and implement best practices for secure development.

Minimum Qualifications

• Master's or PhD degree in Computer Science, Information Security, or a related technical field or equivalent practical experience.
• 15+ years of experience in security engineering, with 10+ years in a leadership role.
• Consistent track record of building and leading high-performing security teams.
• Extensive knowledge of security principles, technologies, and best practices across multiple domains, including cloud security, network security, application security, and data security.
• Experience with threat modeling, vulnerability management, incident response, and security automation.
• Comprehensive grasp of security risks and challenges associated with large-scale, complex systems and datasets.
• Background in building scalable software systems and platforms

• Demonstrated contributions to the security community (e.g., publications, presentations, open-source projects).
• Familiarity with relevant regulations and industry standards (e.g., GDPR, ISO 27001, NIST Cybersecurity Framework).