Senior Software Engineer

Imagine what you can do here. Apple is a place where extraordinary people gather to do their lives best work. Together we create products and experiences people once couldn't have imagined, and now, can't imagine living without. It's the diversity of those people and their ideas that inspires the innovation that runs through everything we do.

Description

APPLE INC has the following available in Austin, Texas. Develop and test security services (new and existing) and documents security services for other developers. Utilizes specialized knowledge of security services internal to Apple to evolve and maintain secure infrastructure of Identity Aware Proxies and Security Detection Pipelines. Deploys new and existing services into test and production environments. Review and add new telemetry and monitoring capabilities for security services. Updates test and deployment pipelines for security services. Responds to service failures and intermittent performance issues, and identifies and improves KPIs for core security services. Partners with Site Reliability Engineer (SREs) to improve overall operational efficiency of core security services. Utilizes specialized knowledge of the platforms internal to Apple where security services are deployed. Identifies key data sets required to enable security detections and validates data schemas in querying system for accessing security data sets. Enable actionable Application Program Interface (APIs) and services for triggering responses to security detections. Partners with teams across Apple to provide support in HTTP access proxy, SSH access proxy, and mTLS access proxy to help them use Security Services internal to Apple. 40 hours/week.

Minimum Qualifications

• Bachelor's degree or foreign equivalent in Computer Science or a related field and 4 years of experience in the job offered or related occupation.
• 1 year of experience with each of the following skills is required:
• Implement core security protocols (Specially SSH, mTLS and HTTP), Public Key Infrastructure (PKI), and Identity Aware Proxies (e.g., Envoy), ensuring secure communication channels and enforcing tamper-proof authentication and authorization backed by HSM (Hardware Security Modules) across all of the software development lifecycle supply chain.
• Design, implement, and test security services at scale using Golang, Shell script, Python, and Starlak complying with security policies and software development lifecycle security best practices.
• Oversee and own the full lifecycle of tooling and security services, from architecture design and development to testing and continuous deployment.
• Leverage Bazel, CI/CD pipelines and other Kubernetes-like container orchestration platforms to deploy and manage security services across multiple environments.
• Architect, build, optimize, and maintain security detection pipelines, integrating durable and volatile data streams via multiple tools and data sources (e.g., Splunk, Databricks, Jupyter Notebooks, SQL and NoSQL Databases) with security detection pipelines to automate security incident response workflows.
• Design and implement tooling, APIs and Services that enable fast automated security responses, integrating with new and existing detection pipelines and other security services for automated fast threat mitigation.
• Collaborate with SREs to enhance service observability and operational efficiency, utilizing tools including Prometheus or Grafana or Splunk to achieve high-availability monitoring and reduce infrastructure incident response times by refining SLAs through telemetry and performance metrics.

• N/A