Senior Security Platform Automation Engineer

Summary People at Apple don't just build products - they craft the kind of experiences that have revolutionized entire industries. The diverse collection of our people and their ideas inspire innovation in everything we do. Imagine what you could do here! Join Apple, and help us leave the world better than we found it.

The Apple Services Engineering Security team builds and provides secure systems and infrastructure that fuel Apple's services (such as iCloud, iTunes, Siri, App Store, and Maps). As part of the ASE Security team, you will help manage the security needs of Apple's services around the world. You will build and integrate the security controls, guardrails, and frameworks that help protect our customers' data in Apple's infrastructure.

We are ASE Security Automation. We build the tools, systems, and services that automate security assurance across Apple's services: agentic vulnerability and rapid risk assessment, design review tooling, and the registers of security-critical applications, data, and environments that security teams rely on, We build automation capabilities, and the tools other security teams run today, under one roof: risk-scoring pipelines, compliance workflows, and an agentic risk-assessment layer.

We are hiring a Staff Software Engineer who can build, support, refactor, and ship across all of it.

Description We're looking for a versatile, hands-on senior software engineer - a "Swiss Army knife" - who moves between our systems based on organizational priority and makes each one better for having worked on it. One quarter you may be implementing a critical service on the new platform; the next, refactoring a legacy tool that security reviewers depend on daily, or preparing a system for production so it runs with low friction and low maintenance.

You will work with our Tech Leads and hiring manager on technical direction, then independently own the delivery of the critical components you take on - from design through production. You will set the bar for how our systems are built to run well in production, and you will mentor engineers and influence their technical solutions along the way.

Responsibilities

Build and Ship Across the Stack

• Implement critical parts of our systems end to end: backend services in Python, Go, or Java; the web frontends (TypeScript/React) that security reviewers and analysts use; the data models that define security and risk findings; and the cloud infrastructure and IaC they run on.
• Move between systems based on organizational priority: the Security Automation Platform (risk-scoring pipelines, compliance workflows, the agentic risk-assessment layer) and our existing systems (agentic vulnerability and rapid risk assessment, design review tools, registers of security-critical applications, data, and environments).
• Build new services from scratch when that is the right call - and integrate with existing security tooling when it isn't.

Modernize and Refactor

• Support and maintain the legacy systems our partners depend on today, and keep them healthy while they serve customers.
• Refactor and migrate legacy systems into new ones incrementally, without disrupting the teams that rely on them. Make deliberate refactor-versus-rebuild calls and explain the trade-off.
• Onboard existing tools onto the platform as building blocks, so their owners focus on their core logic rather than on data, storage, and UI plumbing.
• Pay down technical debt deliberately, leaving each system easier to change than you found it.

Engineer for Operational Excellence

• Build systems that are low friction and low maintenance to run: fast development and iteration, fast and safe deployment, and robust production operation.
• Establish the delivery foundations: staged deployments, test environments, automated testing, observability, and runbooks.
• Prepare systems for production operation: define readiness criteria, service level objectives, and rollback paths before a system takes real traffic.
• Raise these practices to team standards that other engineers follow and build on.

Technical Influence and Mentorship

• Align with the Tech Lead and hiring manager on technical direction, then own the delivery of your components independently.
• Mentor engineers and influence their technical solutions through design reviews, code reviews, and pairing.
• Partner with security engineers, analysts, and tool owners to understand what they need and deliver software they trust.
• Research, prototype, and present ideas and designs to your team, management, and internal customers.

Minimum Qualifications 8+ years building, operating, and maintaining production software - backend services, automation Highly proficient in at least one of Python, Go, or Java Experience building production web frontends with TypeScript and React Hands-on experience with cloud infrastructure, containers and Kubernetes, CI/CD, and infrastructure as code Experience supporting and maintaining legacy systems in production, refactoring or migrating them into new systems, and building new systems from scratch Track record of building systems for operational excellence: staged deployments, test environments, automated testing, and observability Experience integrating first-party and third-party APIs, tools, and services into reliable end-to-end workflows MS or BS or equivalent experience in Computer Science, Engineering, or a related field OR equivalent practical experience in Software or Security Engineering.

Preferred Qualifications Production experience in more than one of Python, Go, or Java Working knowledge of application and cloud security concepts (threat modeling, vulnerabilities, secure configuration) Experience with security tooling such as SAST/SCA scanners, SBOM tooling, or vulnerability intelligence platforms Experience building LLM- or agent-based features, integrating agents with existing systems (tool calling, MCP), or evaluating AI output quality Familiarity with AWS cloud resources (S3, EC2, Lambda, Step Functions, etc.) Experience building batch or streaming data pipelines Experience with Swift or mobile development Experience delivering tooling used by non-engineer users such as security reviewers or analysts Track record of mentoring engineers and raising engineering practices beyond your own work

Pay & Benefits At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $175,000 and $308,500, and your base pay will depend on your skills, qualifications, experience, and location.

Apple employees also have the opportunity to become an Apple shareholder through participation in Apple’s discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards, and can purchase Apple stock at a discount if voluntarily participating in Apple’s Employee Stock Purchase Plan. You’ll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses - including tuition. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. Learn more about Apple Benefits

Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.

EEO Statement Apple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant

Accessibility At Apple, we believe accessibility is a fundamental human right. You’ll find that idea reflected in everything here - in our culture, our benefits and our digital tools. By welcoming as many perspectives as possible, we help you build a career where you feel like you belong.

Learn about accessibility in Apple’s workplace

Learn about reasonable accommodations for job applicants

Application Deadline Apple accepts applications to this posting on an ongoing basis.