Security Engineer

About the role

Security will have the opportunity to work with the engineering leaders, developers, quality engineers, and security teams to secure one of Apple's critical web applications.

Responsibilities

• Assess the risk landscape for products and help drive risk mitigation.
• Work with partner teams on security tools, penetration testing, and security testing methodologies to keep web app services secured.
• Experience a rapidly evolving technology and threat landscape.
• Contribute to the education of teams on compliance activities throughout the development lifecycle.

Requirements

• 4+ years of Security Engineering experience (including 3+ years with Web Application Security).
• 1 year of AWS experience.

Skills

• Scripting in Java, Python, and Bash.
• Strong understanding of OWASP, vulnerabilities, cross-site scripting, SQL injection, and cross-site request forgery.
• Experience working with Security Compliance tickets for applications.
• Experience working with Kubernetes, Containers, and Docker.
• Experience using web application testing tools such as Burp, WebInspect, and/or Zap to scan for vulnerabilities and perform penetration testing.
• Strong written and verbal communication skills.

Location: Austin, TX / Sunnyvale, CA (3 days in office)