Security Engineer - Ad Platforms

Our technology makes advertising possible on the App Store, Apple News, Stocks, and Apple TV. As an Information Security engineer, you will collaborate with engineering leaders, developers, quality engineers, and security teams to secure Ad Platforms’ applications and services, present and future. RESPONSIBILITIES INCLUDE - Conducting security reviews of the service stack, including applications built on cloud and new technologies - Helping build new security tooling and services to support developers at scale - Performing security testing on new applications, products, and features before they are released - Reviewing source code for potential security issues - Designing and automating security test cases to check for vulnerabilities or broken/missing security controls - Providing specific risk assessment and remediation guidelines for developers and business owners - Triaging and reviewing findings from security tools including static and dynamic scanners - Researching the latest security best practices, trends, threats and vulnerabilities, and technology frameworks - Documenting and disseminating security guidelines for common security issues, remediation guidance, and security baselines - Working with developers to provide security guidance and mentor them on secure development practices - Developing tools and exploits to support security testing - Writing automations to streamline common tasks, tests, workflows, etc. • Experience with Java or Javascript • Passion for understanding and researching vulnerabilities and exploitation techniques • Knowledge of development and integration tools and technologies (e.g. CI/CD) • Knowledge of securing applications in cloud (i.e. Docker, Kubernetes) • Experience with common security tools i.e. SAST or DAST • Understanding of core networking concepts (firewalls, load balancers, etc) • Understanding of cryptography • A strong understanding of web application security threats, exploits, prevention (Injection, platform hardening, etc) • Prior experience/background in web application development • Ability to triage, reproduce, and recommend remediations for vulnerabilities • Excellent communication and interpersonal skills Apple is an equal opportunity employer that is committed to inclusion and diversity.