Jobs in the United States

Group jobs by employerEmail me new jobs Save this search

Added 14 days ago
Capital One Shopping Tech, Full - stack Engineer 5 (Remote - Eligible)
Capital One
Frankfort, KY
Utilize programming languages like JavaScript, Java, HTML/CSS, TypeScript, SQL, Python, and Go, Open Source RDBMS and NoSQL databases, Container Orchestration services including Docker and…
Added 14 days ago
AT
Software Engineer II
Akamai Technologies, Inc.
Frankfort, KY
- $95,000 to $171,000 USD / year
…gain deep expertise in large-scale system design, performance engineering, and emerging technologies that define the future of Akamai's products and…
Added 14 days ago
Software Engineer
V2X
Colorado Springs, CO
Design, develop, integrate, test, document, and sustain software components and platform services for distributed, mission-critical systems.
Added 14 days ago
Software Engineer, Employee Experience & Productivity
Apple
Culver City, CA
…most widely used communication and productivity technology and services across Apple - from tools that enable collaboration to the support teams that keep Apple's workforce running. EEP…
Added 14 days ago
UG
Software Engineer
UnitedHealth Group
Eden Prairie, MN
- $72,800 to $130,000 USD / year
3+ years of professional software engineering experience working across modern programming languages such as .NET (C#), Java, and SQL
Added 14 days ago
Software Development Engineer, Mobile App Foundations, BuilderWorks
Amazon.com Services LLC
Seattle, WA
…embedded or distributed software applications, tools, systems, and services using: C#, C++, Java, or Perl…
Added 14 days ago
Software Development Engineer, AWS EC2 Nitro Team
Amazon Development Center U.S., Inc.
Santa Clara, CA
…embedded or distributed software applications, tools, systems, and services using: C#, C++, Java, or Perl…
Added 14 days ago
UG
Site Reliability Engineer
UnitedHealth Group
Eden Prairie, MN
- $72,800 to $130,000 USD / year
Software engineering is the application of engineering to the design, development, implementation, testing and maintenance of software in a systematic method. The roles in this function…
Added 14 days ago
UG
Senior Software Engineer, Cloud Platform - Remote
UnitedHealth Group
Eden Prairie, MN
- $91,700 to $163,700 USD / year
area, you will be required to work in the office a minimum of four days per week
Added 14 days ago
WI
Staff Software Engineer
Walmart Inc.
Sunnyvale, CA
- $185,587 to $286,000 USD / year
…fault-tolerant, microservices design and implementation of REST APIs in Java. Experience with database tuning, clean-up, and troubleshooting of performance database management and analytics…
Added 14 days ago
SW
Staff Data Engineer
Sam's West, Inc.
Sunnyvale, CA
- $212,326 to $286,000 USD / year
…Experience writing code to develop robust and scalable data engineering pipelines by leveraging programming languages including Python, Java, and Scala and business, technical, and data…
Added 14 days ago
WI
Senior Software Engineer
Walmart Inc.
Sunnyvale, CA
- $150,080 to $234,000 USD / year
Skills Required: Experience developing scalable and maintainable web services using Java. Experience using Spring Boot for efficient and rapid application development. Experience developing…
Added 14 days ago
WI
Senior Software Engineer
Walmart Inc.
Sunnyvale, CA
- $187,075 to $234,000 USD / year
Skills required: Experience designing and implementing REST API web services using Java and Spring Boot framework and Coding in object-oriented programming languages including Java with…
Added 14 days ago
Software Development Engineer II, Amazon Digital Advertising
Amazon
Boulder, CO
…embedded or distributed software applications, tools, systems, and services using: C#, C++, Java, or Perl…
Added 14 days ago
Intermediate Software Developer
The MITRE Corporation
Colorado Springs, CO
…security, cybersecurity, health, transportation, and citizen services. We’re a nonprofit engineering, applied research, and advanced technology organization working in the public interest.…
Added 14 days ago
Capital One Shopping Tech, Full - stack Engineer 5 (Remote - Eligible)
Capital One
Denver, CO
Utilize programming languages like JavaScript, Java, HTML/CSS, TypeScript, SQL, Python, and Go, Open Source RDBMS and NoSQL databases, Container Orchestration services including Docker and…
Added 14 days ago
AT
Software Engineer II
Akamai Technologies, Inc.
Denver, CO
- $95,000 to $171,000 USD / year
…gain deep expertise in large-scale system design, performance engineering, and emerging technologies that define the future of Akamai's products and…
Added 14 days ago
T
Software Engineer
TEKsystems
Columbus, OH
- $50 to $75 USD / hour
…experiences using React and JavaScriptBuilding and enhancing backend services using Java and Node.jsSupporting the continued migration of web pages from the external vendor to the…
Added 14 days ago
Software Developer, Sr
OnPoint Community Credit Union
Portland, OR
…deliver high-quality software solutions. A Senior Software Developer should have a deep understanding of software architecture, design patterns, and best practices, and be able to drive…
Added 14 days ago
A
Embedded Software Engineer
Actalent
Goleta, CA
- $107,000 to $145,000 USD / year
…products and systems while collaborating with cross-functional engineering teams and customers.Qualifications Bachelor\'s Degree in Computer Science, Computer Engineering or related field…
Added 14 days ago
Sr. Manager, Full-stack Engineer - Intelligent Foundations and Experiences (IFX)
Capital One
McLean, VA · Richmond, VA
Lead teams utilizing programming languages like Java, Scala, Python, Go, Node.js, JavaScript and TypeScript, Open Source RDBMS and NoSQL databases, Container Orchestration services…
Added 14 days ago
Full-stack Engineer 5 (Senior Manager, IC )-EDT
Capital One
Richmond, VA · McLean, VA
Utilize programming languages like Java, Scala, Python, Go, Node.js, JavaScript and TypeScript, Open Source RDBMS and NoSQL databases, Container Orchestration services including Docker and…
Added 14 days ago
Senior Manager, Full-stack Engineer (PL)
Capital One
Richmond, VA · San Francisco, CA · McLean, VA
Lead teams utilizing programming languages like Java, Scala, Python, Go, Node.js, JavaScript and TypeScript, Open Source RDBMS and NoSQL databases, Container Orchestration services…
Added 14 days ago
Capital One Shopping Tech, Full - stack Engineer 5 (Remote - Eligible)
Capital One
Montgomery, AL
Utilize programming languages like JavaScript, Java, HTML/CSS, TypeScript, SQL, Python, and Go, Open Source RDBMS and NoSQL databases, Container Orchestration services including Docker and…
Added 14 days ago
Sr Security Operations (SecOps) Engineer
Apple
Austin, TX
…security strategy for applications, cloud infrastructure, and engineering platforms. We are particularly interested in a hands-on engineer who can build and integrate reusable security…

Apple

Sr Security Operations (SecOps) Engineer

Austin, TX, United States

Apply on jobs.apple.com About employer

Applications open in a new tab.

Job details

Posting language: English
Posted: Oct 29, 2026

Original job description

Summary We are looking for an experienced Senior Security Operations (SecOps) Engineer to help define and drive the security strategy for applications, cloud infrastructure, and engineering platforms. We are particularly interested in a hands-on engineer who can build and integrate reusable security platforms, automation, and intelligent controls that make security proactive and scalable as software and AI-enabled systems evolve. You will serve as a senior technical security partner to application engineering, DevOps, Site Reliability Engineering, platform engineering, and Apple Information Security teams.

Sales and Operations Engineering is part of IS&T and drives the technology behind Apple's global operations, sales, and supply chain. The team connects the systems that move products from factory to customer - bridging sales platforms with the operational infrastructure that keeps Apple running at scale and ensuring Apple's technology and business priorities move in lockstep.

Description In this role, you will lead complex security assessments and threat modeling, define scalable security controls, influence application and infrastructure architecture, and develop automation that enables security to be embedded throughout the software development lifecycle. You will identify systemic security risks and create engineering solutions that improve security across multiple applications and teams rather than relying on manual or application-specific controls. You will connect security signals to application ownership, business context, and engineering workflows so that teams can prioritize and remediate the risks that matter most.

You will combine deep security expertise with software, cloud, and infrastructure engineering experience to help teams design and operate secure systems at scale. You will also evaluate how AI-assisted and agentic workflows can responsibly improve security analysis, detection, triage, and remediation, while helping teams manage the new risks introduced by AI-enabled applications and agents.

Responsibilities

Lead security architecture reviews, threat modeling, and risk assessments for complex applications, platforms, cloud environments, and distributed systems. Serve as a senior technical security advisor to application engineering, DevOps, SRE, platform engineering, and leadership teams. Define security architecture patterns, engineering standards, reusable controls, and guardrails that can be adopted across multiple engineering organizations. Identify security enforcement points across CI/CD pipelines, infrastructure-as-code, cloud platforms, Kubernetes, APIs, and application architectures. Design and drive scalable DevSecOps capabilities including SAST, DAST, software composition analysis, container security, secrets scanning, supply-chain security, and policy enforcement. Lead vulnerability management strategy including discovery, risk prioritization, remediation guidance, exception management, and executive-level reporting. Where practical, correlate findings with exploitability, asset exposure, application criticality, and ownership to support actionable prioritization. Partner with designated incident-response and Information Security teams on significant security incidents, partnering with engineering and Information Security teams on containment, remediation, root cause analysis, and preventative controls. Develop or guide development of security tooling, automation, and services using Python, Go, APIs, infrastructure-as-code, or similar technologies. Own hands-on implementation of selected integrations and production-quality security automation, not solely advisory design. Identify opportunities to replace manual security processes with automated controls and self-service security capabilities. Evaluate security architecture for AWS/GCP services, Kubernetes platforms, containerized workloads, networking, IAM, secrets management, and multi-tenant systems. Partner with engineering teams early in product and system design to identify risks before deployment rather than relying primarily on post-production detection. Establish security metrics and risk indicators that provide leadership visibility into application and infrastructure security posture. Emphasize coverage, time to remediate critical exposures, control effectiveness, and measurable risk reduction - not just raw vulnerability counts. Evaluate new security technologies and lead technical proofs of concept and adoption decisions. Favor interoperability and maintainability over introducing isolated tools. Mentor engineers and raise security engineering expertise across SecOps, DevOps, SRE, and application engineering teams. Influence security direction across organizational boundaries without requiring direct management authority. Design, prototype, and selectively integrate AI-assisted or agentic capabilities for vulnerability analysis, security reviews, incident investigation, and remediation recommendations. Evaluate accuracy and operational value, with least-privilege access, auditability, and human approval for consequential actions. Build integrations across source control, CI/CD, security scanners, asset inventories, observability, and engineering ticketing systems to turn fragmented findings into actionable workflows. Help assess AI/LLM application and agent risks, including prompt injection, untrusted tool outputs, sensitive-data exposure, and excessive permissions, in collaboration with Information Security and application teams.

Minimum Qualifications 8+ years of experience in security engineering, application security, cloud security, DevSecOps, infrastructure security, security operations, or a related engineering discipline. 8+ years of experience leading security reviews, threat modeling, risk assessments, and remediation of complex distributed or cloud-native systems. 8+ years of experience in application security, cloud security, identity and access management, network security, vulnerability management, and secure software development. 5+ years of experience in securing production environments in AWS, GCP, or another major cloud platform. 5+ years of experience in programming or automation experience (for example Python, Go, or Java), including building integrations, services, or repeatable engineering workflows. 5+ years of experience in integrating security capabilities into at least one of CI/CD, developer workflows, infrastructure-as-code, or production engineering systems. Bachelors Degree in Computer Science or equivalent experience.

Preferred Qualifications Experience securing cloud-native applications and workloads including Kubernetes, containers, APIs, and modern distributed architectures. Strong experience integrating security controls into CI/CD pipelines and infrastructure-as-code workflows. Practical experience integrating or operating several security testing and posture capabilities (e.g., SAST, DAST, SCA, secrets scanning, container security, or CSPM), with judgment about which controls are useful in different workflows. Demonstrated experience designing or developing security automation using Python, Go, Java, Bash, or another programming language. Experience building APIs or integrations across security and engineering systems is particularly valuable. Experience leading vulnerability assessment, prioritization, remediation, and risk-management activities across multiple engineering teams. Ability to translate complex technical security risks into actionable recommendations for engineers, managers, and senior leadership. Demonstrated ability to influence architecture and security outcomes across multiple engineering organizations. Experience building or integrating reusable security controls, automation, or self-service capabilities adopted by more than one team. Ability to take an ambiguous security problem from design through a working, maintainable technical solution.

Experience participating in or leading security incident response, investigation, root cause analysis, and preventative remediation. Bachelor's degree in Computer Science, Computer Engineering, Cybersecurity, Information Security, or equivalent practical experience. Advanced Kubernetes or multi-tenant cloud security experience. Experience identifying security enforcement opportunities within Terraform, CloudFormation, CI/CD systems, Kubernetes admission controls, or similar platforms. Strong knowledge of threat modeling methodologies, offensive security techniques, application penetration testing, and secure architecture principles. Experience with security tooling and platforms for vulnerability management, SAST/DAST, secrets management, runtime security, SIEM, and cloud security. Experience with Splunk, OpenSearch, Prometheus, Grafana, or similar observability and security analytics technologies. Understanding of software supply-chain security, SBOM, artifact signing, provenance, dependency security, and secure build pipelines. Experience designing security metrics, risk scoring models, dashboards, and executive-level security reporting. Experience securing AI/ML workloads, LLM applications, model pipelines, or agent-based systems. Experience building or directing the use of AI/ML or agentic security tooling to scale security assessment, vulnerability analysis, incident investigation, or remediation. Contributions to the broader security community through security research, CVEs, bug-bounty findings, open-source projects, conference presentations, or technical publications. Relevant security certifications (e.g., CISSP, CCSP, CSSLP) are a plus, but not a substitute for hands-on engineering experience.

EEO Statement Apple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant

Accessibility At Apple, we believe accessibility is a fundamental human right. You’ll find that idea reflected in everything here - in our culture, our benefits and our digital tools. By welcoming as many perspectives as possible, we help you build a career where you feel like you belong.

Learn about accessibility in Apple’s workplace

Learn about reasonable accommodations for job applicants

Application Deadline Apple accepts applications to this posting on an ongoing basis.

Apply on jobs.apple.com About employer

More about this job

Skills

DevOps
Cybersecurity
Supply chain management
Software development
Security threats
CI/CD
Infrastructure as code
Kubernetes
Incident response
Root cause analysis
Python
Go
AWS
Google Cloud
Identity and access management
Oracle Java
Computer science
Bash
Prioritization
Risk management
Computer engineering
IBM Terraform
Penetration testing
Splunk
Prometheus
Grafana
Reporting
ML
Research
Presentation skills
CISSP

Report this job

Work requirements

Jobs in the United States