cloud security threat modeler service api patterns

Elyon International

<div>Objective 
 
Engineer and standardize reusable security patterns for Amazon Web Services (AWS), Microsoft Azure, and Google Cloud Platform (GCP). This role provides approved patterns for services, allowing application teams to utilize pre-approved service and API patterns without requiring them to threat model cloud services when developing application threat models. 
 
Primary Responsibilities
<ul><li>Backlog Execution: Conduct deep-dive threat model reviews for an immediate backlog of 22 cloud services.
</li><li>Pattern Engineering: Develop modular, &quot;Lego-brick&quot; threat models for cloud services and API patterns, defining mandatory security controls and standardized use cases.
</li><li>Stakeholder Defense: Schedule threat model reviews (TMRs) for cloud services. Present and defend service threat models in formal threat model reviews (TMRs) with the Boeing Enterprise Security (BES) to defend and secure approval for standardized patterns.
</li><li>Additional Reviews: For services that require changes to environment perimeters, coordinate with landing zone architects to update landing zone architecture standards, schedule reviews, and review changes with the Secure Perimeter Review Board (SPRB) reviews.
</li><li>Technical Research: Perform manual analysis using TrustOnCloud research libraries to identify Cloud Service Provider (CSP) specific threats and configuration requirements. Work with CSP subject matter experts to develop service threat models when necessary. 
</li></ul> 
 
Secondary Responsibilities
<ul><li>Library Stewardship: Manage repository of approximately 200 service and API threat models.
</li><li>Governance &amp; Maintenance: Execute a manual biennial (2-year) refresh cycle for all models in the library to ensure continued alignment with CSP updates and feature releases. 
</li></ul> 
 
Key Performance Indicators (KPIs)
<ul><li>Throughput: Following a 1-month ramp-up and shadowing/training period, complete a minimum of 3 service threat model reviews per month.
</li><li>Backlog Resolution: Clear the initial 22-service backlog within approximately 8 months of the completion of the training period.
</li><li>Maintenance Compliance: Maintain 100% adherence to the biennial manual refresh schedule for the 200-pattern library. 
</li></ul> 
 
Required Qualifications
<ul><li>Experience: 5+ years in cloud security architecture or threat modeling.
</li><li>Technical Depth: Expert knowledge of AWS, Azure, and GCP managed services and the Shared Responsibility Model.
</li><li>Analytical Skill: Proven ability to synthesize complex technical data (e.g., TrustOnCloud reports) into concise, executable security standards.
</li><li>Communication: Ability to negotiate and defend technical security positions to central risk and compliance stakeholders. 
</li></ul> 
 
Preferred Experience
<ul><li>Direct experience using TrustOnCloud for threat research.
</li>Background in creating reusable security patterns in large-scale enterprise environments. 
<li>
</li></ul> 
Only shortlisted candidates are going to be contacted 
 
 
Benefits:
 
 
Paid sick leave, Medical/Dental (optional), 401 (k) Retirement Plan (optional), Employer Paid Life Insurance, Employer Paid Short Term Disability, Optional Life Insurance. 
 
 
 
ELYON International, Inc. is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.</div>

Cloud Security Threat Modeler (Service & API Patterns)

Amazon Web Services

<div><h2 class="jobSectionHeader">DESCRIPTION</h2><div>
Amazon Web Services (AWS) is seeking an exceptional Principal Security Solutions Architect to join our AWS Industries Security Specialist SA team. This role sits at the intersection of deep technical security expertise, emerging AI security challenges, and strategic customer transformation. You will serve as a trusted security advisor to some of the largest and most complex global enterprise customers at AWS across Healthcare &amp; Life Sciences, Automotive &amp; Manufacturing, Energy, Telecommunications, Retail, and Media &amp; Entertainment industries, helping them accelerate innovation and unblock cloud adoption through strategic security and compliance solutions. 
As a Principal Security SA, you will work backwards from customer success to transform security from a perceived barrier into a strong business enabler. You will lead transformational security initiatives that impact entire industries, establish thought leadership in emerging security domains, and influence AWS service roadmaps based on enterprise customer requirements. Your work will demonstrably accelerate time-to-market, increase customer trust, and enable competitive advantages through security excellence. 
 
AWS values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the 8 description, we encourage candidates to apply. If your career is just starting, hasn&rsquo;t followed a traditional path, or includes alternative experiences, don&rsquo;t let it stop you from applying.
 
 
Why AWS? 
Amazon Web Services (AWS) is the world&rsquo;s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating &mdash; that&rsquo;s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. 
 
Inclusive Team Culture 
Here at AWS, it&rsquo;s in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences, inspire us to never stop embracing our uniqueness. 
 
Mentorship &amp; Career Growth 
We&rsquo;re continuously raising our performance bar as we strive to become Earth&rsquo;s Best Employer. That&rsquo;s why you&rsquo;ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.
 
 
Work/Life Balance 
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there&rsquo;s nothing we can&rsquo;t achieve in the cloud.
 
AWS Sales, Marketing, and Global Services (SMGS) is responsible for driving revenue, adoption, and growth from the largest and fastest growing small- and mid-market accounts to enterprise-level customers including public sector. The AWS Global Support team interacts with leading companies and believes that world-class support is critical to customer success. AWS Support also partners with a global list of customers that are building mission-critical applications on top of AWS services. 
The AWS Industries team is committed to helping industry customers enable their digital transformation journeys. Our primary goal is to meet customers where they are in their cloud journey and work backwards from their industry specific needs to transform their business and their entire industry. Our team speaks the language of our industry customers, which means that we focus on business outcomes and industry use cases on behalf of our customers, whether that is how we build products and solutions, how we sell, how we deliver, or how we partner. 
 
Key job responsibilities 
Strategic Customer Engagement &amp; Security as a Business Enabler: 
 
<ul><li>Lead strategic security, risk, and compliance conversations with C-level executives (CISOs, CIOs, CTOs, CEOs) at large multinational enterprises, helping them see security as a catalyst for faster innovation and competitive advantage</li><li>Build and own relationships with senior security decision-makers, managing complex stakeholder environments across technical, legal, compliance, and business teams to drive consensus and outcomes</li></ul>
- Develop and apply deep expertise across six critical security domains: Identity &amp; Access Management, Threat Detection &amp; Incident Response, Data Protection &amp; Privacy, Network &amp; Infrastructure Security, Compliance &amp; Governance, and Application &amp; Workload Security - mastering both AWS native services and how leading third-party security solutions integrate to deliver comprehensive outcomes 
<ul><li>Architect and deliver highly complex, 400+ level technical security solutions for the most demanding enterprise environments, solving problems where standard patterns simply aren't enough</li><li>Lead transformational, industry-scale security initiatives. These include ambitious, multi-month efforts that remove adoption barriers for entire customer segments, not just individual accounts</li><li>Bring deep expertise in AI and Agentic AI security, helping customers securely adopt generative AI and autonomous agent systems</li><li>Create thought leadership content, enable and scale through the broader field organization, and amplify customer feedback to directly influence AWS service roadmaps</li></ul> 
A day in the life 
No two days look exactly the same, but here's a sense of what this role feels like in practice. 
 
You might start your morning reviewing a complex security architecture proposal for a global automotive manufacturer trying to meet EU cybersecurity regulations while migrating to cloud - and by afternoon, you're on a call with a healthcare company's CISO walking through how AWS native controls, combined with their existing identity governance platform, can actually accelerate their compliance timeline rather than extend it. 
 
Mid-week, you might be deep in research mode, working on a new framework for securing agentic AI systems that you're planning to publish and present at an upcoming industry conference. You're not just solving one customer's problem; you're building something that millions of customers across all industries can use. 
 
You'll regularly field complex technical questions from field architects who are stuck on a customer challenge where your guidance helps them move forward without needing to escalate. You'll also spend time in conversations with AWS service teams, sharing what you're hearing from customers and pushing for roadmap changes that would remove real adoption blockers and enable exciting new capabilities. 
 
Some weeks you're traveling to meet a customer in person. Others you're writing, building, or presenting from your desk. The common thread: you're always working backwards from what customers actually need to succeed and you're always thinking about how to make that success repeatable at scale. 
 
About the team 
Our team brings together deep technical security expertise and real industry experience to drive transformation at scale - not just for individual customers, but across entire industries. We're opinionated advisors who prescribe solutions, embrace ambiguity, and challenge the status quo. We invest in long-term relationships at every level of our customers' organizations, prioritizing trust over transactions. We actively shape AWS service evolution based on what we see at the frontier of enterprise security. And we build community by scaling ourselves and elevating skills across the organization so that every customer interaction moves the industry forward. The team serves global customers, and is comprised of builders across Europe and North America.</div><h2 class="jobSectionHeader">
BASIC QUALIFICATIONS</h2><ul><li>12+ years of specific technology domain areas (e.g. software development, cloud computing, systems engineering, infrastructure, security, networking, data &amp; analytics) experience</li><li>Bachelor's degree in computer science, engineering, mathematics or equivalent</li><li>Experience developing technology solutions and evangelising end-to-end technology roadmaps that guide IT transformations toward cloud computing</li><li>Experience communicating across technical and non-technical audiences and at C-level, including training, workshops, publications</li></ul><h2 class="jobSectionHeader">
PREFERRED QUALIFICATIONS</h2><ul><li>Knowledge of distributed systems design and implementation or equivalent</li><li>Knowledge of large scale automation and workflow management or equivalent</li><li>Knowledge of database design and implementation or equivalent</li><li>Knowledge of presentations and whiteboarding skills with a high degree of comfort speaking with internal and external executives, IT management, and developers</li><li>Experience architecting, migrating, transforming or modernizing customer requirements to the cloud</li><li>CISSP-ISSAP (Certified Information Systems Security Professional-Information Systems Security Architecture Professional) or CISSP-ISSEP (Certified Information Systems Security Professional-Information Systems Security Engineering Professional)</li></ul> 
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. 
 
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you&rsquo;re applying in isn&rsquo;t listed, please contact your Recruiting Partner. 
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life &amp; AD&amp;D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits. 
USA, MA, Boston - 182,800.00 - 247,300.00 USD annually 
USA, TX, Dallas - 182,800.00 - 247,300.00 USD annually 
USA, WA, Seattle - 182,800.00 - 247,300.00 USD annually</div>

Principal Security Specialist Solutions Architect, AWS Industries

Google

<div>In accordance with Washington state law, we are highlighting our comprehensive benefits package, which is available to all eligible US based employees. Benefits for this role include:<div><ul><li>
Health, dental, vision, life, disability insurance</li><li>
Retirement Benefits: 401(k) with company match</li><li>
Paid Time Off: 20 days of vacation per year, accruing at a rate of 6.15 hours per pay period for the first five years of employment</li><li>
Sick Time: 40 hours/year (statutory, where applicable); 5 days/event (discretionary)</li><li>
Maternity Leave (Short-Term Disability + Baby Bonding): 28-30 weeks</li><li>
Baby Bonding Leave: 18 weeks</li><li>
Holidays: 13 paid days per year</li></ul></div> 
Note: By applying to this position you will have an opportunity to share your preferred working location from the following: Seattle, WA, USA; Sunnyvale, CA, USA.<h3 class="jobSectionHeader">
Minimum qualifications:</h3><ul>
<li>Bachelor's degree or equivalent practical experience.</li>
<li>2 years of experience with security engineering, computer and network security and security protocols.</li>
<li>2 years of experience with security assessments or security design reviews or threat modeling.</li>
<li>2 years of coding experience in one or more general purpose languages.</li></ul> 
<h3 class="jobSectionHeader">
Preferred qualifications:</h3><ul><li>
Experience in systems security, virtualization, or cloud infrastructure security.</li><li>
Experience with threat modeling, vulnerability research, and secure software development practices.</li><li>
Proficiency in C, C++, or Rust, along with scripting languages such as Python or Go.</li><li>
Understanding of operating systems internals, including kernel security and memory protection mechanisms.</li><li>
Excellent communication skills with the ability to lead and mentor a technical team.</li>
</ul><div><h2 class="jobSectionHeader">About the job</h2>
Our Security team works to create and maintain the safest operating environment for Google's users and developers. Security Engineers work with network equipment and actively monitor our systems for attacks and intrusions. In this role, you will also work with software engineers to proactively identify and fix security flaws and vulnerabilities.

In this role, you will proactively fortify Google Compute Engine (GCE) against Virtual Machine (VM) escapes, driving up the cost of exploitation for attackers. Our strategy encompasses vulnerability detection through code reviews, fuzzing, and testing, continuous monitoring of attack surfaces and the implementation of hardening techniques like sandboxing and compiler mitigations. You will partner with development teams to embed security into the design of new features and swiftly remediate virtualization vulnerabilities. Because we are growing, you will have the opportunity to help set the direction for product security in Google Cloud and partner with amazing existing teams across Google. These include existing security teams, privacy teams and product engineering teams. You will set the direction and impact of this organization with regards to product security. You will work across multiple security domains. A few examples are: tool development, security education, web application scanning and testing, vulnerability research and security data analysis all with the goal of highlighting and driving down risk.
Google Cloud accelerates every organization&rsquo;s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google&rsquo;s technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems.<div></div><div> 
The US base salary range for this full-time position is $147,000-$211,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.</div><div></div><div> 
Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google.</div></div><div><h2 class="jobSectionHeader">
Responsibilities</h2><ul>
<li>Design, develop, test, deploy, and enhance security solutions for Google Cloud.</li>
<li>Facilitate alignment and clarity across teams on goals, outcomes, and timelines.</li>
<li>Manage project priorities, deadlines, and deliverables.</li>
<li>Review designs and drive towards defense in depth and security by default, both with long term engagements and development of scalable controls and systems.</li>
<li>Review and develop secure operational practices and controls, and provide security guidance for engineers and support staff.</li>
</ul></div>Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form.</div>

Security Engineer, Virtualization Security, Google Cloud

Deloitte

<div>Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success. 
 
Recruiting for this role ends on 5/30/26 
 
Work you'll do 
 
As a Microsoft 365 Security Senior Consultant, you will be at the front lines with our clients supporting them with their Cloud Cyber Risk needs specifically helping them navigate the journey on securing their Microsoft 365 (M365) platform. This will include: 
<ul><li>
Function as senior onshore engineer/consultant for the following Microsoft technologies: Purview, Intune, Sentinel, Security Copilot, Entra ID, Defender for Office, Defender for Endpoints and Servers, Defender for Vulnerabilities, Defender for Cloud Apps, Defender XDR and SCCM</li><li>
Conduct cloud security analysis, recommendations and configurations of prospective clients' Microsoft Entra ID, Office 365 (O365), Exchange Online, Teams, OneDrive for Business, and SharePoint Online environments based on Deloitte's Microsoft 365 Cyber Risk Framework. This can include Microsoft's cloud solutions such as Entra, Purview, Defender, Intune, and Sentinel.</li><li>
Perform technical health checks for these M365 platforms/environments prior to broader deployments.</li><li>
Support proof of concept and production deployments of these cloud technologies.</li><li>
Assist clients with transitions to the Microsoft 365 security services such as solution setup and service configuration, focused on risk mitigation. Additional technologies include MFA, Conditional Access, Purview Compliance Manager, M365 Defender, Defender for O365, Defender for Cloud Apps (MDCA), Purview Information Protection (MPIP), Purview Data Loss Prevention (DLP).</li><li>
Assist clients with configuration and delivery of cloud security and compliance reports.</li><li>
Provide technical support for M365 E5 security services and resolve service-related issues through research and troubleshooting and working with Microsoft.</li><li>
Implement industry leading practices around M365 E5 cyber risks and cloud security for clients.</li><li>
Design and develop cloud-specific security policies, standards and procedures e.g., O365 tenant management and configuration, identify management and access control, auditing and monitoring, security incident and event management, data protection (classification/labeling, DLP, encryption), user and administrator account management, SSO, conditional access controls and password/key management.</li><li>
Troubleshoot system level problems in a multi-vendor, multi-protocol network environment.</li><li>
Document platform technical issues, analysis, client communication, and resolution as part of cyber risk mitigation steps.</li><li>
Execute on M365 security engagements during different phases of the lifecycle - Discover, Assess, Design, Deploy/Test, Hypercare/Handover.</li><li>
Implement industry leading practices around M365 cyber risks and cloud security for clients.</li><li>
Provide internal technical training to personnel as needed.</li><li>
Acting as a subject matter expert on cloud cyber risk for Microsoft Purview, Microsoft Intune, Microsoft Defender, and Microsoft Sentinel capabilities.</li><li>
Contribute to Point-of-Views (PoVs) on providing leading practices to our clients on the M365 security challenges they face.</li></ul> 

The team you'll join 
 
Our Enterprise Security offering embeds security in all aspects of digital transformation by securing a client's technical backbone while enabling secure digital transformation. Includes security architecture, secure development and deployment, end-to-end cyber cloud capabilities, application security, and security for emerging technologies and connected products. 
 
Required: 
<ul><li>
Working experience in at least two of the areas listed below.</li><li>
4+ years of experience in technical consulting, client problem solving, architecting and designing solutions in a consulting role</li><li>
4+ years of hands-on technical experience with Microsoft 365 enterprise-level messaging and collaboration services (Teams, OneDrive for Business, Exchange Online, Entra ID, SharePoint Online, O365 administration and setup) in implementation and operations.</li><li>
4+ years of hands-on technical experience with enterprise-level systems management systems such as SCCM and Intune and endpoint engineering (MEM) and mobile device management (MAM &amp; MDM)) implementation or operations.</li><li>
4+ years of hands-on technical and project / professional experience enterprise-with at least two of the following technologies: Microsoft Endpoint Security Platforms (e.g. Defender for Endpoints and Defender for Servers), Microsoft Sentinel, Microsoft's email security platform (Defender for Office), Microsoft Purview &amp; Entra ID</li><li>
Ability to travel 50%, on average, within North America, based on the work you do and the clients and industries/sectors you serve.</li><li>
Limited immigration sponsorship may be available.</li></ul> 
Ideally the following technical experience is a plus in any of the technologies below: 
<ul><li>
Microsoft Security Copilot</li><li>
Defender for Vulnerabilities</li><li>
Defender for Cloud Apps</li><li>
Defender XDR</li><li>
SCCM</li></ul> 

Preferred: 
<ul><li>
Microsoft Certifications such as: (SC-900, SC-100, SC-200, SC-300, SC-400),</li><li>
Cyber Certifications such as: CCSP, CCSK, CISSP, CCNP, and CCNA.</li><li>
BA/BS Degree preferred. Ideally in Computer Science, Cyber Security, Information Security, Engineering, Information Technology.</li></ul> 
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $118,700 - $218,600 
 
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance. 
 
Information for applicants with a need for accommodation: https://www2.deloitte.com/us/en/pages/careers/articles/join-deloitte-assistance-for-disabled-applicants.html</div>

Microsoft 365 Security Senior Consultant

Oracle

<div>About the role 
 
You will design security and compliance reference architectures, standards, and controls for Oracle Cloud services and platforms, with a focus on continuous compliance and audit-ready engineering. This role is a hybrid of compliance engineering (building automation, evidence pipelines, compliance-as-code) and security GRC architecture (control design, framework mapping, risk decisions, and governance at scale).
 
 
You will lead high-impact design reviews, control and evidence strategy, and requirements-to-implementation translation across cloud primitives (compute, network, storage), identity and access, container/Kubernetes platforms, AI/ML systems, and developer platforms. You will collaborate with senior leaders and product teams, mentor engineers, and influence roadmaps through clear writing, principled prioritization, and metrics&mdash;while directly authoring and owning OSCAL artifacts and scaling through others.
 
Ideal candidates bring deep experience &ldquo;building clouds&rdquo; or securing large-scale distributed systems; strong fluency in global compliance regimes (including but not limited to NIST-800 series, SOC 2, ISO 27001, ISO 42001, PCI, FedRAMP, GDPR, and other international/regional frameworks); and a track record of delivering automation-first compliance outcomes (e.g., continuous control validation, evidence automation, and measurable reduction in audit preparation effort).
 
You are hands-on, inclusive, and customer-obsessed, balancing rigor with velocity.
 
 
About the business 
 
Oracle&rsquo;s Governance, Risk &amp; Compliance (GRC) organization enables secure, compliant cloud delivery by partnering deeply with engineering and operations. We standardize control outcomes, strengthen evidence quality, and operationalize compliance through scalable patterns, automation, and measurable risk reduction&mdash;helping Oracle meet customer, regulatory, and industry expectations. 
 
What you'll do
<ul><li>Set strategy: Define multi-year GRC and compliance engineering strategy and roadmaps for continuous compliance, control automation, evidence pipelines, and audit readiness across Oracle products and services&mdash;focused on reducing manual audit toil through automation and standardization.
</li><li>Authoritative design: Publish security/compliance reference architectures, control baselines, evidence standards, and implementation patterns; lead cross-org reviews that raise the bar on auditability and continuous assurance.
</li><li>Build compliance into the cloud: Partner with core service teams (compute, networking, storage, virtualization, container/orchestration, service mesh) to drive secure-by-default and compliant-by-default designs, with controls that are measurable and operationally sustainable.
</li>Frameworks<li> controls: Translate regulatory and customer requirements into engineering-ready controls, acceptance criteria, and implementation guidance across regimes including (but not limited to) NIST-800, SOC 2, ISO 27001, ISO 42001, PCI, FedRAMP, GDPR, and regional frameworks&mdash;ensuring mappings are rationalized and scalable across multiple regimes.
 
OSCAL ownership: Directly write, curate, and own OSCAL artifacts (e.g., catalogs/profiles/component definitions and related content as applicable), and establish scalable operating models (templates, review workflows, QA checks) so teams can contribute and maintain artifacts over time.
</li><li>Compliance-as-code: Drive adoption of policy-as-code and compliance-as-code approaches (automated control validation, CI/CD gates, drift detection, and standardized attestations) to reduce manual audit effort and improve consistency.
</li><li>Evidence engineering: Design and standardize evidence collection pipelines with lineage, traceability, retention, and quality controls; ensure evidence is high-signal, reproducible, and mapped to controls and system boundaries&mdash;prioritizing automation, normalization, and audit-ready reporting.
</li><li>Continuous monitoring &amp; remediation: Design scalable mechanisms to continuously detect control drift and drive remediation (automated and/or workflow-driven), with clear metrics and accountability for sustained compliance outcomes.
</li><li>Risk, compliance, and safety: Partner with privacy, legal, and security stakeholders to incorporate privacy-by-design and AI governance needs (e.g., ISO 42001) into engineering controls and evidence strategies&mdash;especially for AI-enabled applications and services.
</li><li>Incident leadership (compliance perspective): Ensure compliance controls remain resilient through incidents and major changes; drive post-incident reviews and systemic improvements to guardrails and evidence quality.
</li><li>Influence at scale: Produce clear design docs and executive narratives; mentor engineers and program leaders; build communities of practice and reusable assets for continuous compliance.</li></ul></div>
 <div>What you'll bring
<ul><li>12+ years in security architecture/engineering, compliance engineering, or GRC technical leadership for large-scale distributed systems; significant experience &ldquo;building clouds&rdquo; (IaaS/PaaS) or platform engineering
</li><li>Deep expertise in security/compliance frameworks and audit expectations, including several of: NIST-800 series (e.g., NIST 800-53), SOC 2, ISO 27001, ISO 42001, PCI, FedRAMP, GDPR, and international/regional frameworks (ability to map and rationalize across regimes)
</li><li>Demonstrated ability to translate requirements into engineering-ready controls, define control intent and testability, and drive implementation across multiple teams with measurable outcomes
</li><li>Demonstrated experience building continuous compliance automation programs/platforms (e.g., control-to-requirement mappings, automated evidence collection, continuous monitoring) that materially reduce audit prep effort and builder toil
</li><li>Hands-on OSCAL proficiency: capable of authoring and owning OSCAL artifacts directly, and creating scalable contribution models (templates, review workflows, QA checks, governance).
</li><li>Strong experience with compliance-as-code / policy-as-code, automated control validation, CI/CD integration, configuration baselines, and continuous monitoring
</li><li>Hands-on depth with one or more: OCI, AWS, Azure, GCP; Kubernetes; Terraform/Policy-as-Code; CI/CD; Linux hardening; observability stacks (enough to design/validate controls and evidence feasibility)
</li><li>Demonstrated ability to lead cross-org initiatives, influence without authority, and deliver compliant-by-default solutions at scale&mdash;including leading through engineering managers/TPMs and partnering effectively with audit/assessors when needed
</li><li>Strong written and verbal communication; ability to produce clear design docs, control narratives, evidence strategies, and executive-level updates
</li>Commitment to inclusive collaboration and mentoring 
<li>
</li></ul> 
Preferred Qualifications:
<ul><li>Experience designing and operating evidence pipelines and assurance platforms (control testing automation, evidence normalization, lineage, retention, dashboards, and audit-ready reporting)
</li><li>Experience building or operating large-scale detection and remediation pipelines that continuously reduce misconfigurations/control drift across large environments
</li><li>Experience partnering with assessors/auditors and driving remediation programs across large engineering organizations
</li><li>Familiarity with secure SDLC controls and software supply chain assurance (SBOMs, signing, provenance, deployment gates), especially where they support compliance outcomes
 
Experience defining security/compliance specifications for AI-enabled applications and embedding them into SDLC workflows (aligned to AI governance expectations such as ISO 42001)
</li>Advanced degree in Computer Science, Engineering, or related field (or equivalent experience) 
<li>
</li></ul> 
Leadership competencies
<ul><li>Performance, drive, and execution
</li><li>You&rsquo;ll deliver value and shape a performance-driven culture while ensuring accountability and communicating expectations
 
Collaboration
</li><li>You understand and promote the value of collaboration and inclusivity and can align strategic aims with organizational goals
 
Communicating for impact
</li><li>You inspire confidence by championing a clear understanding and support of organizational strategy and objectives
 
Inspirational leadership
</li><li>You build a reputation for strategy by inspiring and empowering others while showing leadership internally and externally
 
Competitive edge
</li><li>You anticipate changes in customer needs and seize opportunities to build value, encourage innovation, and meet objectives</li></ul></div>

Security Architect

Apple

As a Data Engineer on the Capacity Engineering team, you will help design, build, and operate the data foundation that drives capacity, cost, and power-related decisions across Apple&rsquo;s infrastructure footprint. 
 
In this role, you will: 
 
Architect, implement, and maintain large-scale batch and streaming pipelines that ingest, process, and model infrastructure telemetry, cost, metering, utilization, forecasting, and power metrics from multiple clouds and bare metal environments. 
 
Design and evolve robust data models (with a strong focus on dimensional modeling) and storage patterns that support analytics, internal billing, and efficiency use-cases. 
 
Treat data as a product: define quality checks, SLAs, and observability to ensure data is accurate, timely, and trusted by stakeholders across Apple. 
 
Integrate and enrich raw signals with metadata and attribution to power use cases such as internal billing/showback, usage understanding, efficiency and optimization, clawbacks, planning, and procurement. 
 
Collaborate closely with data scientists, software engineers, platform teams, finance partners, program managers, and leadership to translate requirements into scalable, reliable data solutions and services. 
 
Implement standard methodologies for data governance, lineage, metadata management, and security, in alignment with Apple&rsquo;s standards for data protection and privacy. 
 
Build end-to-end data solutions that include logging, anomaly detection, data validation, cleaning, and transformation, with strong emphasis on monitoring, debuggability, and continuous improvement. 
 
Contribute to the evolution of our data and platform stack, including tooling, frameworks, and standards for development, testing, deployment, and operations (CI/CD, infrastructure as code, etc.). 
 
Description 
 
Apple&rsquo;s Capacity data engineering team, within the Apple Services Engineering organization, is building the centralized data backbone that powers how Apple understands, plans, and optimizes its cloud and data center infrastructure. 
 
We engineer a unified, trusted data lake that consolidates cost, metering, utilization, forecasting, and power metrics produced by Apple platforms and systems (including bare metal) across both third-party and Apple internal clouds. Enriched with metadata and attribution, this becomes the single source of truth for internal billing, understanding usage and utilization, clawbacks, planning, procurement, and efficiency initiatives. 
 
We collaborate with platform engineering, finance, capacity engineering, and leadership teams to build large-scale data pipelines, enable descriptive and predictive analytics, and power dashboards and products that support critical business decisions. This is your opportunity to help design and operate highly visible, global-scale systems processing petabytes of data and supporting hundreds of users across Apple. 
 
Come join us to help deliver the next generation of infrastructure insights at Apple. 
 
Preferred Qualifications 
 
Advanced degree in a related field a plus. 
 
Experience with data visualization / BI tools, such as Superset or Tableau (other tools like QuickSight, QlikView, Cognos, or Business Objects are a plus) 
 
Experience with containerization and orchestration, such as Docker and Kubernetes/EKS is a plus 
 
Understanding of authentication and authorization (AuthN/AuthZ) patterns 
 
Knowledge of data governance principles, data security best practices, and data privacy regulations 
 
Minimum Qualifications 
 
Bachelors degree or equivalent experience in Computer Science, Information systems, Software Engineering, Data Science or related field. 
 
5+ years of experience in data engineering (or equivalent practical experience), including: 
 
Building and maintaining large-scale ETL/ELT data pipelines 
 
Distributed computing (e.g., Spark / PySpark) for data processing and automation 
 
Query performance optimization and tuning at scale 
 
Hands-on experience with: 
 
Apache Spark and Airflow (or similar workflow/orchestration tools) for efficient large-scale data pipelines 
 
Data modeling, especially dimensional modeling, and designing schemas optimized for analytics and reporting 
 
Big data platforms and/or data lake architectures 
 
Experience with CI/CD tooling such as Jenkins (or similar tools) 
 
Experience with cloud technologies, AWS/GCP (e.g., S3, EMR, Lambda, Glue, RDS/Redshift, Big-query, Kinesis or similar services) 
 
Apple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant . 
 
Pay &amp; Benefits 
 
At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $139,500 and $258,100, and your base pay will depend on your skills, qualifications, experience, and location. 
 
Apple employees also have the opportunity to become an Apple shareholder through participation in Apple's discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards, and can purchase Apple stock at a discount if voluntarily participating in Apple's Employee Stock Purchase Plan. You'll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses - including tuition. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. Learn more about Apple Benefits. 
 
Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.

Sr. Data Engineer

We are looking for a passionate and experienced Software Engineer to help build the foundation of Apple&rsquo;s next-generation Generative AI platform. This role blends deep systems thinking, scalable backend development, and cutting-edge GenAI technologies such as Retrieval-Augmented Generation (RAG) and Agentic frameworks. You will design and implement large-scale, secure, and highly available systems, while collaborating across teams to drive the future of intelligent experiences. If you&rsquo;re excited about building production-grade GenAI infrastructure and solving hard distributed systems problems, this is your opportunity to make a lasting impact at scale. 
 
Description 
 
An ideal candidate should be a strong programmer and a creative problem solver who thrives in a fast-paced environment, working across teams and organizations. You enjoy learning new technologies and have deep interest in either client/systems software design and programming or server side distributed system software development. You take responsibility; you feel a personal stake in the product you ship and for the end-user of it; you communicate responsibilities and scope clearly. The main responsibilities for this position include:&quot;,&quot;responsibilities&quot;:&quot;Leading effort to build large scale, distributed and highly available system and pipelines. 
 
Understanding of GenAI based platform and system including RAG, Agents Etc 
 
Design and develop solution using Java tech stack. 
 
Work with cross functional teams to drive requirements. 
 
Design and implement as per secure guidelines 
 
Work with QA to identify issues and fix it. 
 
Other aspects of the job include mentoring and providing feedback to junior developers, working with the team manager and PM in estimating scope and team capacity, responding to urgent requests from executives or business needs, and maintaining the stability and high reliability of our systems. 
 
Preferred Qualifications 
 
Excellent written and oral communication skills on both technical and non-technical topic. 
 
Strong experience working with Gen Ai based systems including RAG (Embedding or Chunking) and Agentic frameworks (e.g., LangChain, AutoGPT) 
 
Experience working with RAG Data ingestion pipelines, Vector DB and data platforms (e.g., Snowflake, Spark, Flink) 
 
Deep understanding of REST or GraphQL or gRPC APIs, authentication (OAuth, API keys), and distributed systems 
 
Experience in building, maintaining and enhancing RESTful web services using Spring boot for cloud platforms like AWS or GCP 
 
Strong grasp of software design principles (SOLID, DRY) and testing frameworks (Pytest, Jest). 
 
Ability to debug complex cross-platform issues and optimize performance. 
 
Ability to debug and improve ML workflow tuning for high accuracy. 
 
Ability to articulate technical concepts effectively to diverse audiences 
 
Self directed, self motivated and detail oriented with ability to come up with good design proposals and thorough analysis of production issues 
 
Minimum Qualifications 
 
Bachelor's degree in Computer Science or similar degree or equivalent experience 
 
4+ years of software engineering experience in Java or Python 
 
Proven skills in designing scalable, highly available distributed systems which can handle high data volumes. 
 
Solid understanding of concurrency and multi-threading, multiple design patterns and debugging and analytical methodologies 
 
Experience in building, maintaining or enhancing RESTful web services using cloud platforms like AWS or GCP 
 
Extensive understanding of LLM&rsquo;s, RAG, or Agentic workflow 
 
Apple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant . 
 
Pay &amp; Benefits 
 
At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $139,500 and $258,100, and your base pay will depend on your skills, qualifications, experience, and location. 
 
Apple employees also have the opportunity to become an Apple shareholder through participation in Apple's discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards, and can purchase Apple stock at a discount if voluntarily participating in Apple's Employee Stock Purchase Plan. You'll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses - including tuition. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. Learn more about Apple Benefits. 
 
Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.

Software Engineer (GenAi - Platform & Solution), AI & Data Platforms (AiDP)

Explore 154+ Cloud security threat modeler service api patterns in Seattle this March. Find roles across top companies and apply now to boost your career.