Security Engineer Health Software

Imagine what you could do here. At Apple great ideas have a way of becoming great products services and customer experiences very quickly - making the kind of impact that changes peoples Apple Health Software team embodies the core Apple values around delighting our customers with groundbreaking user experiences empowering users to live a better - and healthier - life while keeping their data safe private and secure. nnWe are seeking a self-driven senior security engineer to join Apples Health team to contribute to efforts supporting Apples health research tools and ecosystem. As a member of our team you will have the unique and rewarding opportunity to enable teams across the company to conduct health research and ensure that research participant data is safe private and secure.

As a Senior Security Engineer you will be responsible for ensuring the security of the systems used to develop Apples health features. You will conduct manual application security tests and audit source code to support releases. Youll construct security testing plans and conduct testing to ensure security controls are in place and implemented correctly. You may develop tooling to support security improvement initiatives for the platform and provide security guidance for new projects features and changes to Health related projects.

Conduct manual application security tests and audit source code to support releasesnDesign and execute comprehensive security testing plans to validate security controls are properly implementednPerform threat modeling exercises for new features and research toolsnReview architecture and design documents to identify security risks and recommend mitigationsnDevelop and maintain security tooling and automation to improve the security posture of our platformnProvide security guidance and consultation for new projects features and changes to Health related projects

10 years of experience in security engineeringnBachelors degree in Computer Science Information Security or a related technical field (or equivalent practical experience)nExtensive knowledge of security principles technologies and best practices across multiple domains including cloud security network security application security and data securitynExperience with threat modeling vulnerability management incident response and security automationnComprehensive grasp of security risks and challenges associated with large-scale complex systems and datasetsnBackground in building scalable software systems and platformsnStrong communication and collaboration skills with the ability to succinctly communicate security concerns to mixed audiences

Background in web application development and/or code auditingnExperience with security testing and review of medical or health related applicationsnExperience with multi-cloud platform applicationsnDemonstrated contributions to the security community (e.g. publications presentations open-source projects)