fintech risk analyst

information security engineer Jobs in Seattle

information security engineer

principal security software engineer Jobs in Seattle

principal security software engineer

product security architect iii Jobs in Seattle

product security architect iii

security analyst

Amazon.com

<div><h2 class="jobSectionHeader">DESCRIPTION</h2><div>
Amazon is seeking a highly motivated Security Investigator/Intelligence Analyst to join our world-class Amazon Security organization and work within the Enterprise Protection Program to help Amazon prevent and mitigate insider risk. 
 
As part of the Enterprise Protection Program, you will be involved with evaluating, investigating, and mitigating active insider risks daily. We are looking for someone who is a fan of &quot;diving deep&quot;; constantly learning; eager to drive the development and refinement of proactive initiatives to identify, evaluate, and mitigate risks to Amazon; adept at managing complex investigations; seeks to maintain an understanding of the security needs of our customers and business, and is willing to take on new challenges. 
 
You will consult with business, legal, and tech teams to develop gap remediation strategies and be proactive in the build-out of sustainable and systematic solutions. You will also be effective both working independently and cooperatively across partner teams when required, and able to contribute and deliver results whether involved at the level of strategic planning or tactical execution. 
 
This position involves on-call responsibilities, typically for one week every six months. 
 
Key job responsibilities 
<ul><li>Manage complex and confidential investigations, providing timely and fact-based reporting to partners and leadership</li><li>Effectively partner with teams across Information Security, Legal, Human Resources, and others necessary in support of investigations</li><li>Establish, document, and refine standard operating procedures and internal best practices for investigative functions</li><li>Collaborate with Engineering teams to build and develop solutions and tools that identify and mitigate risk by translating use cases into technical requirements</li><li>Perform deep dive analysis of internal and external datasets to identify trends, anomalies, and activities indicative of threat</li><li>Collaborate with partner teams in the threat intelligence community, internal and external to Amazon</li><li>Identify and produce metrics to measure effectiveness of analytic capabilities and data to drive business decisions</li></ul> 
About the team 
Diverse Experiences 
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn&rsquo;t followed a traditional path, or includes alternative experiences, don&rsquo;t let it stop you from applying. 
 
Why Amazon Security? 
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon&rsquo;s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. 
 
Inclusive Team Culture 
In Amazon Security, it&rsquo;s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. 
 
Training &amp; Career Growth 
We&rsquo;re continuously raising our performance bar as we strive to become Earth&rsquo;s Best Employer. That&rsquo;s why you&rsquo;ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. 
 
Work/Life Balance 
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there&rsquo;s nothing we can&rsquo;t achieve.</div><h2 class="jobSectionHeader">
BASIC QUALIFICATIONS</h2><ul><li>Bachelor's degree in a relevant field or equivalent work experience</li><li>5+ years of demonstrated experience as an analyst/investigator supporting counterintelligence, counter-terrorism, insider threat, internal investigations, and/or law enforcement investigations</li><li>2+ years&rsquo; experience in conducting open-source analysis</li></ul><h2 class="jobSectionHeader">
PREFERRED QUALIFICATIONS</h2><ul><li>Experience working with large, complex data sets</li><li>Experience managing complex and fast-moving issues</li><li>Experience communicating clearly and concisely with leadership, stakeholders, and cross-functional teams</li><li>Knowledge of threat landscapes across the technology industry and government entities</li><li>Experience with developing requirements for Software Developers, Data Engineers, and Data Scientists</li><li>Excellent written and verbal communication skills across a broad range of technical and non-technical audience</li><li>Ability to work with a high degree of autonomy in a global environment</li></ul> 
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. 
 
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you&rsquo;re applying in isn&rsquo;t listed, please contact your Recruiting Partner. 
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life &amp; AD&amp;D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits. 
USA, VA, Arlington - 102,000.00 - 178,400.00 USD annually 
USA, VA, Herndon - 102,000.00 - 178,400.00 USD annually 
USA, WA, Seattle - 102,000.00 - 178,400.00 USD annually</div>

Security Investigator, Enterprise Protection Program

Apple

Apple Maps Security seeks security engineers to partner with engineering teams developing new products and features. We work directly with developers, site reliability engineers, and security teams to protect Maps services and build a secure foundation. In this role, you deliver end-to-end security assurance, drive security architecture, conduct threat modeling, lead security testing, and manage risk. We collaborate with partners in Infosec, privacy, and legal to keep Apple services secure for users. Ready to drive impactful security improvements at Apple Maps? Apply now and join our team! 
 
Description 
 
An architect in the Maps Security team will lead security architecture reviews across diverse application stacks, develop tooling and frameworks to streamline the security testing and validation process, identify systemic issues and drive improvements, mentor developers and peers to adopt a security mindset and practices. Key responsibilities include developing and executing security cases to uncover vulnerabilities and missing controls. You will deliver actionable risk assessments and remediation guidance to developers and leadership as a trusted advisor. The role involves performing source code analysis and adversary simulation across applications, APIs, and environments. You will design robust defenses and secure-by-design solutions. Staying informed about emerging threats and translating insights into enhanced security measures is essential. You will author security guidelines, baselines, and playbooks to elevate organizational standards. 
 
&quot;,&quot;responsibilities&quot;:&quot;An architect in the Maps Security team will lead security architecture reviews across diverse application stacks. You will build tooling and frameworks for security testing, identify systemic issues, and mentor teams in security practices. 
 
Preferred Qualifications 
 
Assess emerging GenAI attack surfaces - such as prompt injection, data exfiltration, and model inversion -and implement appropriate safeguards-such as input validation, data monitoring, and regular model auditing-for LLM-powered applications. 
 
Understand model lifecycle security, secure fine-tuning, and ML/AI governance frameworks. 
 
Keep security simple, scalable, and effective by building foundational practices that engineers embrace. 
 
Keeps up with industry trends in security technology and threats 
 
Secure infrastructure in public cloud environments, including AWS, Azure, and Google Cloud. 
 
Minimum Qualifications 
 
Application and Infrastructure Security expert with 10+ years' experience. 
 
Deep understanding of web application security threats, exploits, and prevention. 
 
Ability to triage, reproduce, and recommend remediations for vulnerabilities 
 
Experience in adversary simulation and threat modeling. 
 
Driven to research vulnerabilities and exploitation techniques. 
 
Knowledge of development and integration tools and technologies (e.g., CI/CD) 
 
Familiar with static and dynamic application security tools (e.g., Checkmarx, Qualys). 
 
Know test automation frameworks for security QE and networking concepts. 
 
Collaborate cross-functionally to foster innovation with robust protection 
 
BS/MS in Computer Science or relevant industry experience. 
 
Apple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant . 
 
Pay &amp; Benefits 
 
At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $171,600 and $302,200, and your base pay will depend on your skills, qualifications, experience, and location. 
 
Apple employees also have the opportunity to become an Apple shareholder through participation in Apple's discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards, and can purchase Apple stock at a discount if voluntarily participating in Apple's Employee Stock Purchase Plan. You'll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses - including tuition. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. Learn more about Apple Benefits. 
 
Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.

Security Engineer- Apple Maps

We are the Apple Services Engineering (ASE) Security Red Team. We focus on deep technical security review work of critical ASE services and infrastructure. These security reviews will be scoped and focused on review depth and quality. We are growing our team and looking an Security Engineer to lead deep reviews that identify meaningful security improvement opportunities. In this role, you will work closely with the security engineering, InfoSec, privacy, SRE, detection, and design review teams to keep Apple's services secure for our users. You will identify security weaknesses, validate and design detection mechanisms, and provide actionable recommendations to enhance our security posture. You will go beyond simple to find risks and identify obscure and complex risks within complex services. You will collaborate with various architecture and engineering teams to continuously validate and improve our security controls and detection capabilities, with a strong focus on developing repeatable testing frameworks and metrics-driven security improvements. If you love diving into complex and important systems, and driving the security of that system over time, we want to talk to you! 
 
Description 
 
In this role, you will scope and lead focused security reviews on critical internet scale applications and supporting infrastructure. You will learn the services architecture and risk profile to build a scope that enables a meaningful security review. 
 
&quot;,&quot;responsibilities&quot;:&quot;Responsible for the enumerating risks, planning reviews, and executing those reviews to identify vulnerabilities and improvement opportunities 
 
A technical expert in uncommon and obscure risks 
 
A technical expert in complex business logic risks that require a depth of understanding of the services and their architectures 
 
Ability to identify areas that are ripe for improvement and establish appropriate security goals 
 
Current on new security technologies, vulnerabilities, and methodologies 
 
Ability to develop proof of concept systems to automate security recommendations, vulnerability discovery, and process workflows 
 
Preferred Qualifications 
 
8+ years in an information security field; 4 or more of those years conducting security reviews 
 
Bachelors degree in Computer Science / Engineering or a related, with emphasis in security related fields (or equivalent experience) 
 
Experience constructing threat scenario narratives and building exploit chains 
 
Ability to reason about and influence software architecture for security 
 
Community contributions like public CVEs, bug bounty recognition, open source tools, blogs, talks etc. 
 
Minimum Qualifications 
 
4+ years in an information security field or software engineering; 2 or more of those years conducting security reviews 
 
2+ years of manually reviewing source code to assist in finding vulnerabilities 
 
Ability to adapt quickly to prioritization shifts and investigate unfamiliar technologies 
 
Extensive infrastructure, cloud, and application security experience 
 
Experience communicating risk to engineering and leadership teams 
 
Ability to reason about security of a large and complex application or infrastructure 
 
Experience going deep on complex systems for extended engagements 
 
Apple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant . 
 
Pay &amp; Benefits 
 
At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $139,500 and $258,100, and your base pay will depend on your skills, qualifications, experience, and location. 
 
Apple employees also have the opportunity to become an Apple shareholder through participation in Apple's discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards, and can purchase Apple stock at a discount if voluntarily participating in Apple's Employee Stock Purchase Plan. You'll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses - including tuition. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. Learn more about Apple Benefits. 
 
Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.

Security Engineer - Deep Dive

<div><h2 class="jobSectionHeader">DESCRIPTION</h2><div>
The AmSec Endpoint Security Capabilities and Prevention Engineering team build and operate first and third party services for the monitoring and response to malicious activity on the Amazon internal devices. We collect data from all parts of Amazon's environment worldwide. 
 
We seek a Sr Security Engineer who is excited about leading a talented team to solve challenging problems by developing our own solutions, while operating a mission critical service that protects Amazon and our customer data. Our challenges are broad and deep - we build flexible, secure, scalable, high-performance and robust tools and services. These services enable our security engineers and analysts to detect and respond to malicious activity on our infrastructure. In Amazon Security we operate multiple large scale data query platforms to allow security engineers to detect anomalies and facilitate threat hunting. You will lead a group of engineers to operate these services to the highest operational level while building new tools and services to improve the customer experience and make it easier/faster/cheaper for the customer to get what they need. 
 
In AmSec, we obsess over our customers, and their trust is our first priority. Trust is earned by building a highly respected security team to tackle new challenges at a large scale. In this role, you will lead a key software development team to deliver high quality, scalable products that are deployed to our internal services around the world. You will collaborate with product owners and customers to deliver the best features, using resources and technologies efficiently. You will work with stakeholders to define solutions that scale and satisfy a wide variety of security needs. You will assign responsibilities, identify appropriate resources, and build schedules to ensure timely completion of project milestones. You will also assess risks, anticipate bottlenecks, and balance business needs against technical constraints to maximize business benefit. You bring a technical background, are detail driven and have excellent problem solving abilities. The successful candidate is passionate about delivering extensible, on-time solutions and has experience developing high-performance teams through goal-setting, attention to performance metrics, continuous process improvement and mentorship. 
 
Key job responsibilities 
<ul><li>Creating, updating, and maintaining threat models for a wide variety of web applications hosted on cloud</li><li>Manual and Automated Secure Code Review, primarily in Java, Python and Javascript</li><li>Development of security automation tools</li><li>Adversarial security analysis using the latest tools to augment manual effort</li><li>Provide Security training and outreach for internal development teams</li><li>Provide Security architecture and design guidance to application development teams</li><li>Independently solve systemic, complex security problems that require novel methods or approaches</li><li>Influence your team&rsquo;s and partners&rsquo; process, priorities, strategy and choices by using data to improve security outcomes</li><li>Provide technical and strategic guidance to senior leaders and stakeholders through effective oral and written communications</li></ul> 
A day in the life 
As a Security Engineer, you will collaborate with software development teams to ensure we keep our customers safe while developing novel services. In a given day, you might be inspecting an application&rsquo;s code for security issues, building a new framework to help our software developers build faster and more securely, or fine-tuning the design for a new service. 
The ideal candidate combines technical acumen with an ability to lead by influence and communicate clearly. Technically, this person will be a security specialist with one or more areas of deep expertise within application security. They will clearly articulate risks to technical and non-technical audiences alike. Successful candidates will effectively harmonize disparate opinions while effectively prioritizing risks to guide their partners towards secure solutions. They will shape the strategy of the Product Security Team and influence systemic security improvements across our service organizations. They will guide and mentor other engineers on the team. 
 
About the team 
Diverse Experiences 
 
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn&rsquo;t followed a traditional path, or includes alternative experiences, don&rsquo;t let it stop you from applying. 
 
Why Amazon Security? 
 
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon&rsquo;s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. 
 
Inclusive Team Culture 
 
In Amazon Security, it&rsquo;s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. 
 
Training &amp; Career Growth 
 
We&rsquo;re continuously raising our performance bar as we strive to become Earth&rsquo;s Best Employer. That&rsquo;s why you&rsquo;ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. 
 
Work/Life Balance 
 
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there&rsquo;s nothing we can&rsquo;t achieve.</div><h2 class="jobSectionHeader">
BASIC QUALIFICATIONS</h2><ul><li>5+ years of non-internship background in troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools experience</li><li>5+ years of work in identifying security issues and risks, and developing mitigation plans experience</li><li>5+ years of (non-internship) scripting, programming, and security code review in common programming languages experience</li><li>Knowledge of at least two of the following programming languages: Scala, Java, Python, C/C++, or Go</li><li>Experience as a mentor, tech lead or leading an engineering team</li></ul><h2 class="jobSectionHeader">
PREFERRED QUALIFICATIONS</h2><ul><li>Experience applying threat modeling or other risk identification techniques or equivalent</li><li>Experience with security in service-oriented architectures/microservices and web services</li></ul> 
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. 
 
Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company&rsquo;s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. 
 
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you&rsquo;re applying in isn&rsquo;t listed, please contact your Recruiting Partner. 
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life &amp; AD&amp;D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits. 
USA, CA, San Luis Obispo - 178,400.00 - 226,700.00 USD annually 
USA, WA, Seattle - 178,400.00 - 226,700.00 USD annually</div>

Sr Security Engineer, AFSS

<div>Apple Information Security organization is seeking an information security engineer to support the enhancement of our security solutions. 
 
At Apple, we are a diverse collection of thinkers and doers, continually reimagining our products, systems, and practices to help people do what they love in new ways. This is a deeply collaborative place, where everything we create is the result of people in different roles and teams working together to make each other&rsquo;s ideas stronger. That same passion for innovation that goes into our products also applies to our practices, strengthening our commitment to leave the world better than we found it. 
 
Description 
 
Apple Information Security organization builds, deploys and operates security solutions throughout Apple, enabling our teams to do their best work, securely. 
 
In this role, you will join a team responsible for identifying, developing and enhancing the security insights we derive from the data our solutions generate 
 
This is a hands-on role in a dynamic and fast paced environment. As an information security engineer, you will: 
 
<ul><li>Leverage deep functional expertise across Offensive and Defense security domains, to perform data analysis, identifying insights which both deliver meaningful security outcomes and can be operationalised at scale.</li></ul> 
<ul><li>Partner with engineering and business teams, to identify, design and implement new features into our solutions, which enable us to extend and enhance the insights we generate.</li></ul> 
<ul><li>Navigate ambiguity, be adept at managing competing priorities, and be able to effectively partner across teams to achieve a security outcome.</li></ul> 
You will have the opportunity to innovate on technology with a global reach. We are looking for a self-motivated individual with an intuition for security who is not afraid to question assumptions. The ability to be results-driven and comfortable with dynamic requirements, as well as having excellent interpersonal and time management skills, are keys to success in this position. 
 
Show us your talent in this challenging, fun, and exciting environment. It&rsquo;s what makes us Apple. 
 
Preferred Qualifications 
 
Proven ability to design, develop and deliver proof of concept solutions to address requirements 
 
Experience in Data and Analytics using technologies like Pandas or Spark 
 
Experience in programming using an object orientated language 
 
Experience in applying and experimenting with AI/ML, to solve security related use-cases 
 
Experience of working across the solutions development lifecycle 
 
Familiarity with cloud platforms (e.g., AWS, GCP) and their security services is a plus. 
 
Minimum Qualifications 
 
A Bachelor&rsquo;s Degree or equivalent years of work experience 
 
More than 5 years of applied experience in an operational cyber security role, such as Incident Response, Threat Intelligence, or Vulnerability Management. 
 
Experience of interpreting threat and vulnerability details, and devising ways to identify them in endpoint, network, and application 
 
Experience with security tools and technologies (e.g. XDR, IDS/IPS, EDR). 
 
Able to work with and present to technical engineers and business stakeholders 
 
Excellent verbal and written communication skills 
 
Ability to build and maintain strong internal and external collaborative relationships. 
 
Apple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant . 
 
Pay &amp; Benefits 
 
At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $163,300 and $290,100, and your base pay will depend on your skills, qualifications, experience, and location. 
 
Apple employees also have the opportunity to become an Apple shareholder through participation in Apple's discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards, and can purchase Apple stock at a discount if voluntarily participating in Apple's Employee Stock Purchase Plan. You'll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses - including tuition. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. Learn more about Apple Benefits. 
 
Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.</div>

Information Security Engineer

Apple Services Engineering (ASE), the team behind iCloud and Media services and the infrastructure that powers it, is looking for a Senior Security Engineer to partner with engineering teams working on new products and features. You will collaborate with developers, site reliability engineers, and security teams to protect ASE services and design a secure foundation for services at Apple. Your work will include full end-to-end security assurance activities including security architecture, threat modeling, some security testing, and risk management. You will be working with partner teams in security engineering, privacy, and offensive security to keep Apple's services secure for our users. If you love diving into different complex technical systems, sharing security improvements, and making security better, we want to talk with you! 
 
Description 
 
In this role, you will be the primary security team point of contact for several large engineering efforts. You will work with engineering teams throughout their development lifecycle. You will conduct security reviews and develop threat models and use the insights from these engagements to build standard methodologies. You will help define, automate and advocate for platform-wide security improvements. You will partner with your colleagues to raise the security bar for all engineering teams at Apple. 
 
As a technical lead responsible for the security of Apple's internet-facing services and backend infrastructure, you will be: Innately curious, listening for nuances and digging into details to understand systems and their weaknesses; Able to identify areas that are ripe for improvement and establishes appropriate security goals; Experienced and comfortable establishing relationships with teams to drive security improvements; Current on new security technologies, vulnerabilities, and methodologies; An excellent verbal and written communicator; Able to develop proof of concept systems to automate security recommendations, vulnerability discovery, and process workflows; Able to use data to drive security review efficiency and prioritize high-value security team engagement Responsible for security decisions impacting millions of users. 
 
Preferred Qualifications 
 
Bachelor's Degree or equivalent experience preferred 
 
Experience securing cloud-native applications and workloads including containerized environments (Kubernetes/EKS/GKE), serverless architectures (Lambda/Cloud Functions), and modern CI/CD pipelines 
 
Experience with multiple cloud platforms (AWS, GCP, Azure, AliCloud) and the ability to perform comparative security analysis across different cloud providers' security models and controls 
 
Minimum Qualifications 
 
5 or more years conducting security reviews, threat modeling, tracking findings, and communicating risk to engineering and leadership 
 
Hands-on experience in cloud security engineering with demonstrated expertise in securing at least one major cloud platform (AWS, GCP, or AliCloud) in production environments 
 
Deep technical knowledge of cloud-native security controls including identity and access management (IAM), network security (VPCs, security groups, firewall rules), encryption (KMS, data protection), and logging/monitoring services native to major cloud platforms 
 
Proven experience working with and using policy-as-code frameworks such as AWS Service Control Policies (SCPs), GCP Organization Policy Constraints, or AliCloud Control Policies to enforce security guardrails at scale 
 
Strong background in third-party risk assessment and vendor security reviews, including the ability to evaluate cloud service architectures, identify security gaps, and provide actionable remediation guidance 
 
Demonstrated ability to develop security requirements and design documentation for complex cloud environments, translating technical controls into clear, implementable guidance for engineering teams 
 
Conversant in at least one programming language such as Python, Java, Go, or Swift 
 
Apple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant . 
 
Pay &amp; Benefits 
 
At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $171,600 and $302,200, and your base pay will depend on your skills, qualifications, experience, and location. 
 
Apple employees also have the opportunity to become an Apple shareholder through participation in Apple's discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards, and can purchase Apple stock at a discount if voluntarily participating in Apple's Employee Stock Purchase Plan. You'll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses - including tuition. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. Learn more about Apple Benefits. 
 
Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.

Senior Cloud Security Engineer - Design Review

lululemon

Who we are
 
lululemon is an innovative performance apparel company for yoga, running, training, and other athletic pursuits. Setting the bar in technical fabrics and functional design, we create transformational products and experiences that support people in moving, growing, connecting, and being well. We owe our success to our innovative product, emphasis on stores, commitment to our people, and the incredible connections we make in every community we're in. As a company, we focus on creating positive change to build a healthier, thriving future. In particular, that includes creating an equitable, inclusive and growth-focused environment for our people.
 
About this team
 
The Data & AI Security team is responsible for protecting the organization’s most critical data and AI assets while enabling responsible, scalable innovation. We build and operate Data Security Posture Management (DSPM) and AI Security Posture Management (AISPM) capabilities across a complex, global ecosystem. Our work is highly cross-functional, partnering with Data & Analytics, Engineering, Legal, Privacy, and GRC teams to embed security by design while keeping the organization fast, compliant, and resilient. Our focus is on visibility, prevention, and remediation at scale, balancing strong security controls with minimum business friction.
 
The Senior Cybersecurity Engineer is responsible for securing the organization’s AI ecosystem by discovering, assessing, and mitigating risks associated with AI models, data usage, model lifecycle, and AI-driven workflows. This role partners closely with Data Governance, Platform Engineering, and Security Architecture to enable safe and scalable AI adoption while ensuring regulatory, privacy, and corporate policy alignment.
 
Core responsibilities
 
As a Senior Cybersecurity Engineer, you will lead complex security engineering initiatives, designing and implementing security controls, platforms, and solutions that protect critical systems at scale. You will build and operate enterprise security capabilities such as centralized authentication, security enforcement mechanisms, and security automation, while applying secure coding practices and rigorous testing and validation. You will partner closely with engineering teams to embed security into system design and delivery, drive improvements to security quality and reliability, and mentor junior engineers through hands-on technical leadership and knowledge sharing.
 
Select responsibilities include: 
*
 <ul>
<li>Build enterprise security systems implementing centralized authentication, security platforms, and organization-wide controls</li>
<li>Lead comprehensive threat modeling and security assessments for complex systems, evaluating attacker behaviour across integrations and influencing secure design decisions early in the development lifecycle</li>
<li>Own end-to-end response for complex security incidents, driving deep root cause analysis and delivering coordinated long-term improvements to detection, prevention, and security monitoring capabilities</li>
<li>Develop advanced security code, tools, and libraries including security automation platforms, scanners and detectors, security testing systems, and security SDKs</li>
<li>Establish security code standards defining secure coding practices, code review requirements, and implementation quality</li>
</ul>
Qualifications
 <ul>
<li>Bachelor’s degree in Computer Science, Cybersecurity, or related field; security certification strongly preferred</li>
<li>6-10 years of experience leading security engineering initiatives, establishing security standards and practices, and building security systems at scale, or equivalent</li>
<li>Hands-on experience securing data used by AI systems, including data discovery, classification, access governance, and usage monitoring across cloud data platforms, feature stores, and AI pipelines</li>
<li>Experience securing AI and analytics workloads in modern cloud environments, including identity and access controls, service-to-service authentication, secrets management, and policy enforcement across platforms supporting AI/ML development and inference (e.g., cloud data platforms, ML platforms, containerized services)</li>
<li>Proven experience implementing enterprise security controls and building security infrastructure including centralized authentication, authorization services, and security policy enforcement systems at scale</li>
<li>Track record of writing complex security systems including security platforms and SDKs; experience establishing security code review practices, security checklists, and security development frameworks</li>
<li>Demonstrated ability to lead advanced threat modeling for complex systems, anticipating sophisticated adversarial behaviour; experience owning investigation and resolution of complex security incidents with deep root cause analysis</li>
<li>Familiarity with DSPM, DLP, or data governance tooling applied to AI use cases is strongly preferred</li>
</ul>
Must haves
 <ul>
<li>Acknowledge the presence of choice in every moment and take personal responsibility for your life.</li>
<li>Possess an entrepreneurial spirit and continuously innovate to achieve great results.</li>
<li>Communicate with honesty and kindness and create the space for others to do the same.</li>
<li>Lead with courage, knowing the possibility of greatness is bigger than the fear of failure.</li>
<li>Foster connection by putting people first and building trusting relationships.</li>
<li>Integrate fun and joy as a way of being and working, aka doesn’t take yourself too seriously.</li>
</ul>
Please Note: 
Applicants must be authorized to work for any employer in the U.S. We are unable to sponsor or take over sponsorship of an employment visa at this time for this role.
 
Compensation and benefits package
 
lululemon’s compensation offerings are grounded in a pay-for-performance philosophy that recognizes exceptional individual and team performance. The typical hiring range for this position is from $147,300 - $193,300 annually; the base pay offered is based on market location and may vary depending on job-related knowledge, skills, experience, and internal equity. As part of our total rewards offering, permanent employees in this position may be eligible for our competitive annual bonus program, subject to program eligibility requirements.
 
At lululemon, investing in our people is a top priority. We believe that when life works, work works. We strive to be the place where inclusive leaders come to develop and enable all to be well. Recognizing our teams for their performance and dedication, other components of our total rewards offerings include support of career development, wellbeing, and personal growth:
 <ul>
<li>Extended health and dental benefits, and mental health plans</li>
<li>Paid time off</li>
<li>Savings and retirement plan matching</li>
<li>Generous employee discount</li>
<li>Fitness & yoga classes</li>
<li>Parenthood top-up</li>
<li>Extensive catalog of development course offerings</li>
<li>People networks, mentorship programs, and leadership series (to name a few)</li>
</ul>
Note: The incentive programs, benefits, and perks have certain eligibility requirements. The Company reserves the right to alter these incentive programs, benefits, and perks in whole or in part at any time without advance notice.
 
Workplace arrangement
 
This role is classified as In-Person under our SSC Workplace Policy:
 
In-person collaboration and/or office-based work is necessary or important for the role. Work is mainly performed onsite, 4-5 days per week depending on role requirements.
 
#LI-CM1

Senior Cybersecurity Engineer - Data & AI Security

Explore 108+ Security analyst in Seattle this April. Find roles across top companies and apply now to boost your career.