Security Software Engineer, OS Security

Summary

Apple’s OS Security team is looking for a motivated software engineer to design, build, and deploy world-class containment and isolation mechanisms throughout our operating systems. As part of the Security Engineering and Architecture group, you will develop the foundational technologies—including compartmentalization, mandatory access control, and robust policy engines—that ensure our platforms are resilient and never just one mistake away from compromise. Our goal is for users to feel confident that our devices have their back every time they interact with an Apple product.

Description

In this hands-on software engineering role, you will design robust software systems and craft secure, high-performance code, collaborating across the company with everyone from our Silicon Engineering group to our Human Interface designers. We build technology deep within macOS and iOS internals, but we also lift it up through the software stack, creating ergonomic APIs that connect world-class security engineering directly to developers and users. You will have the autonomy to invest your time into the most promising areas of research and development, seeing your work scale to protect millions of people in their daily lives. Come help us push the boundaries of pragmatic, user-focused security.

Preferred Qualifications

Exposure to iOS and macOS (end user, administrator, and/or developer).
Involvement in open source technologies and development communities such as FreeBSD and Linux.
Real world kernel and/or hypervisor programming experience.
Experience designing and implementing security policy languages.

Minimum Qualifications

BS in Computer Science or equivalent experience/skills in systems programming and security.
Strong C and low-level systems programming skills.
Understanding of operating system internals (macOS, iOS, BSD, or Linux).
Ability to navigate and understand code up and down the software stack (comfortable diving into kernel, low-level userland, framework, and application code).
Familiarity with past, current, and emerging security exploits and mitigation techniques.
Demonstrated readiness to balance concurrent priorities, manage technical debt, and deliver on tight schedules.
Excellent partnership and communication skills to collaborate with a broad range of engineering teams.