Platform Engineer - Security (Platform Architecture)

About This Role

Defining, designing, and connecting the ecosystem of Apple's tightly integrated hardware, software, and services is the core of this engineering role within the Platform Architecture group. This position focuses on securing advanced consumer devices and protecting individual privacy and personal data, while ensuring a high-quality user experience. The role is for a hardworking and inspired individual to raise the bar on security for Apple's growing product line.

Responsibilities

• Develop threat models and associated security architectures for new Apple products and technologies
• Derive system security requirements
• Design balanced and novel mitigations in creative collaboration with product and engineering teams
• Develop detailed system-level specifications to guide product development, integration, and quality assurance teams
• Aid integration of security technologies across team boundaries (e.g., client/server)
• Use interpersonal and technical skills to champion adoption of industry-leading security technologies across multiple product categories
• Identify emerging threats, new attacks, and mitigation techniques as the external landscape evolves
• Drive architecture evolution to stay ahead of the industry

Requirements

• BS degree or relevant industry experience
• Experience working with basic cryptographic principles (e.g., symmetric vs asymmetric crypto, encryption vs authentication, post-quantum algorithms, or public key infrastructure implementations)
• Experience with platform security primitives (e.g., Secure Boot, Secure Update, Secure Communication across entities, Secure lifecycle management etc.)
• Experience in threat modeling of security features and architecture (preferably spanning across software, hardware and system designs)
• Experience in leading cross-functional initiatives to define, drive and productize security features

Nice to have:

• Minimum of 10 years relevant industry experience
• Experience in threat modeling of security features and architecture, specifically spanning across software, hardware and system designs
• Experience in effectively communicating highly technical details to a non-technical audience
• Experience with user identification and authentication technologies, such as biometrics, smart cards etc.
• Experience with Operating System concepts, such as isolation, privilege levels etc. and platform security concepts, such as virtualization and confidential computing
• Experience with defining / evaluation of platform security features spanning across client/server and deployed across infrastructure in factories, or organization, or internet
• Basic experience with programming and/or auditing experience with Python, C, and unix shell scripting, and with utilizing AI to facilitate research, design and evaluation activities