Security Engineer

About This Role

This security engineering role offers the chance to work with engineering leaders, developers, quality engineers, and security teams to secure one of Apple's critical web applications. It involves assessing the risk landscape for products, driving risk mitigation, and collaborating with partner teams on security tools, penetration testing, and security testing methodologies to maintain the security of web app services. The role operates within a rapidly evolving technology and threat landscape, contributing to the education of teams on compliance activities throughout the development lifecycle.

Responsibilities

• Assess the risk landscape for products and help drive risk mitigation
• Work with partner teams on security tools, penetration testing, and security testing methodologies to keep web app services secured
• Contribute to the education of teams on compliance activities throughout the development lifecycle

Requirements

• 4+ years of Security Engineering experience
• 3+ years with Web Application Security
• Scripting in Java/Python, Bash
• Strong understanding of OWASP, vulnerabilities, cross-site scripting, SQL interaction, and cross-site request forgery
• Experience in working with Security Compliance tickets for the applications
• Experience working with Kubernetes, Containers, and Docker
• Experience using web application testing tools, such as Burp, WebInspect, and/or Zap, to scan for vulnerabilities and for penetration testing
• Strong written and verbal communication skills
• 1 year of AWS experience

Important Details

• Work format: 3 days in office
• Locations: Austin, TX; Sunnyvale, CA