DevOps Software Engineer Fuzzing Infrastructure, SEAR

As part of Apples Security Engineering u0026 Architecture (SEAR) organization youll join our mission to create the worlds most secure products. We build groundbreaking tools that empower our security researchers to deeply analyze Apples codebases and frameworks and surface security concerns efficiently and at is one of the most effective ways we find vulnerabilities before attackers do. We are building the next generation of our fuzzing infrastructure and we are seeking a DevOps Software Engineer to help develop it deploy it and keep it running reliably for the teams that depend on it. By combining infrastructure and software development you will directly contribute to our mission to create the worlds most secure products.

A strong candidate for this role is passionate about building reliable secure and scalable infrastructure that directly amplifies security research impact. You will work closely with security researchers and fuzzing engineers located worldwide on a new fuzzing platform that runs large fleets of fuzzing jobs across heterogeneous targets from userland libraries to full-system and device will take part in the complete journey: from architecture and implementation of the platforms core services through build and deployment to ongoing reliable operation. You will help migrate existing fuzzing campaigns onto the new platform and make it simple for researchers to onboard new the development side you will contribute to the platforms services APIs and integrations and harden research code for scale. On the infrastructure side you will design containerized deployments establish CI/CD pipelines implement secrets management and access controls and build the monitoring and observability that tell us whether campaigns are actually making progress (coverage throughput crash rates worker health).

* Develop and maintain the components of the fuzzing infrastructure: job scheduling worker orchestration corpus and crash storage result aggregation and triage pipelines.n* Build and operate CI/CD for the platform itself and for the fuzzing targets that run on it (reproducible builds artifact versioning safe rollouts and rollbacks).n* Secure the platform. Fuzzing runs untrusted crashing and potentially malicious inputs so isolation network egress control authentication and auditability matter.n* Define and monitor the metrics that show campaign health and detect stalled or degraded fuzzers early.n* Support researchers: gather requirements onboard targets and communicate progress and impact to engineers managers and leaders across the organization.n* Challenge our design choices and help keep the platform maintainable as it will bring equal rigor to code quality security posture and operational excellence balancing all three to maximize SEARs ability to proactively secure Apple products at scale.

Experience designing and operating cloud and on-premises service infrastructure with advanced knowledge of containerization Kubernetes CI/CD data storage networking authentication/authorization (OIDC OAuth) queuing logging and knowledge of scripting and programming languages including Python and with fuzzing concepts and tooling (e.g. AFL libFuzzer coverage-guided fuzzing sanitizers crash triage and deduplication)nSelf-starter with strong ownership accountability and the ability to work autonomously and collaboratively across teams and organizations in a fast-paced environment.

Experience building or operating security research tooling or large-scale batch/distributed compute systemsnExperience with and/or strong enthusiasm for security especially offensive securitynExperience with large-scale data pipelines and storage systems (corpora crash artifacts coverage data)nFamiliarity with AI/ML workflows and agents