Job description

Join the Apple B2B Team as a Sr. Security Engineer to contribute to the development, implementation, and maintenance of security measures within B2B platforms. The role involves code review, security assessments, tooling, incident response, and promoting security awareness.

Responsibility

• Code Reviews: Review code and ensure secure coding standards, utilizing static and dynamic analysis tools.
• Security Assessments and Threat Modeling: Conduct threat analysis and work with development teams to address security concerns.
• Security Tooling: Automate security testing using various tools and technologies.
• Incident Response: Assist with security incidents and collaborate with the response team to improve capabilities.
• Security Awareness: Enhance security awareness among software development teams and ensure compliance with standards like PCI, SOX, PII, GDPR.
• Analytical and Automation Mindset: Apply strong analytical skills to complex security challenges and automate security processes for proactive threat detection.

Qualifications

• Bachelor or Masters in Computer Science or related discipline.
• Programming/scripting skills in Java, JavaScript, Python etc.
• Experience integrating and automating security checks into CI/CD pipeline.
• Conduct penetration testing.
• Knowledge of network security, encryption protocols, access control, and identity management.
• Experience with security assessments, vulnerability scans, and penetration tests.
• Proficiency in security technologies and tools, including SAST, IAST, and DAST.
• Understanding of cloud security principles and technologies, including container content.
• Familiarity with security incident response and root cause analysis.
• Knowledge of SDLC security practices.
• Experience with security audits, compliance assessments, and remediation.
• Relevant certifications such as CISSP, CISM, CEH, or CompTIA Security+ are desirable.