software security consultant

Allstate Insurance

<div>At Allstate, great things happen when our people work together to protect families and their belongings from life&rsquo;s uncertainties. And for more than 90 years, our innovative drive has kept us a step ahead of our customers&rsquo; evolving needs. From advocating for seat belts, air bags and graduated driving laws, to being an industry leader in pricing sophistication, telematics, and, more recently, device and identity protection.
Job Description
Product Security is growing. We are engineering enterprise-wide security solutions that start left instead of just shifting left. Our focus spans AI Security, SaaS Security, API Security, Threat Modeling Agents, Apex Threat Modeling, Code Security in the IDE/Pipelines, and more. 
 
We are seeking a visionary Platform Consultant with deep engineering expertise and strong security architecture experience. In this senior-level role, you will act as a strategic advisor to our engineering teams and organizations, guiding them through complex technical challenges and shaping platform strategies in line with Allstate&rsquo;s outcome-based delivery culture. You will embed secure-by-design principles, including rigorous threat modeling from the outset of development, to fortify our platforms from the ground up. You will make clear, well-informed architectural decisions and articulate our security posture and recommendations to senior leadership, ensuring clarity and confidence in the integrity of our solutions. 
 
As a security-focused engineering leader, you will collaborate with teams from Security Operations to implement proactive defenses and risk mitigations, to consulting with data scientists to leverage analytics and AI for enhanced platform capabilities. This cross-functional engagement provides continuous opportunities to influence Allstate&rsquo;s engineering community. You will mentor teams in modern engineering practices, champion system-wide best practices (such as Zero Trust architecture and reusable design), and drive the adoption of emerging technologies to improve reliability, performance, and efficiency. 
 
The ideal candidate is a forward-thinking technical leader who seamlessly blends engineering know-how with security vision, inspiring change and driving strategic progress in a dynamic technology landscape. You are unwilling to accept solutions that compromise either developer experience or security integrity.<h2 class="jobSectionHeader">
Key Responsibilities</h2><ul><li>
Serve as a trusted consultant to engineering teams and organizations, guiding secure platform design and implementation across diverse product domains</li><li>
Communicate clearly and effectively ensuring business and engineering needs are met</li><li>
Foster effective collaborative sessions with teams from different disciplines and leadership levels</li><li>
Embed secure-by-design principles and deep threat modeling practices into the development lifecycle, ensuring security is foundational&mdash;not bolted on</li><li>
Define and communicate Allstate&rsquo;s security posture clearly to technical and business leadership, enabling informed decision-making</li><li>
Lead the ideation and implementation of innovative security controls that challenge the status quo and elevate Allstate&rsquo;s embedded security maturity</li><li>
Drive forward engineering practices that adapt to evolving technologies, enabling scalable, resilient, and efficient platforms</li><li>
Mentor engineers and platform consultants in systems thinking, reusable design, and outcome-based delivery</li><li>
Influence cross-functional teams through Discovery &amp; Framing sessions, architectural reviews, and strategic planning</li><li>
Promote and enforce architectural standards, simplification, and reuse across the enterprise</li><li>
Actively participate in agile ceremonies and foster a culture of continuous learning and iterative delivery</li></ul> 
Job Qualifications 
 
Essential Skills:<ul><li>
Extensive experience (8+ years) in software engineering, platform development, or architecture roles, with increasing technical leadership responsibilities in complex enterprise environments</li><li>
Demonstrated success as a high-impact technical advisor to multiple engineering teams, with proven ability to influence architecture direction and mentor engineers in best practices</li><li>
Expert-level knowledge of Agile/XP and DevOps methodologies, including paired programming, test-driven development (TDD), and CI/CD automation, with a track record of using these practices to accelerate delivery and improve quality</li><li>
Hands-on expertise in architecting and delivering large-scale distributed systems, such as cloud-native microservices on Docker/Kubernetes, deployed on modern cloud platforms (AWS, Azure, or equivalent), ensuring scalability, high availability, and performance</li><li>
Broad technical proficiency across multiple programming languages and frameworks (especially Java and JavaScript ecosystems), and comfort with modern development tools (e.g., IntelliJ or VS Code, Git/GitHub, Spring Boot) and designing robust RESTful APIs</li><li>
Exceptional analytical and problem-solving skills, combined with excellent communication abilities to clearly convey complex technical and security concepts to both engineering teams and senior business leaders</li></ul>
Desirable Skills:<ul><li>
In-depth knowledge of industry security frameworks and web/API security standards &ndash; e.g., OWASP Top 10, MITRE ATT&amp;CK, OAuth 2.0, OpenID Connect, SAML &ndash; to guide secure design and development practices</li><li>
Deep expertise in security architecture and secure-by-design practices, including advanced threat modeling, robust identity and access management (IAM) strategies, and Zero Trust architectures &ndash; with a proven ability to embed these controls at all stages of the development lifecycle</li><li>
Broad technical proficiency across multiple programming paradigms &ndash; in addition to Java and JavaScript experience, deep experience with procedural (e.g., Go, Rust) and functional (e.g., F#, Elixir, Haskell, Clojure) programming languages is a strong signal of architectural proficiency</li><li>
Technical proficiency with AI tools such as running local models, developing MCP servers, using AI powered development tools like cursor/copilot/claude code/codex/etc. to help drive your work more efficiently and test for effective model deployment strategies</li><li>
Demonstrated expertise in API-first design and specification-driven development (e.g., OpenAPI, Swagger), enabling scalable, discoverable, and reusable services. Proven ability to shape developer experience and accelerate delivery through contract-first approaches, while laying the foundation for AI-assisted development and automated API governance</li><li>
Deep understanding of modern cryptographic principles and protocols (e.g., AES, TLS, Argon2, elliptic curve cryptography), with the ability to evaluate, implement, and advise on secure data protection strategies. Skilled in applying cryptographic techniques to strengthen trust boundaries, safeguard sensitive data, and ensure compliance with enterprise and regulatory security standards</li><li>
Experience with advanced development and testing practices, such as behavior-driven development (BDD) and integrating automated security checks into CI/CD pipelines</li><li>
Familiarity with emerging technologies (e.g., AI/ML, knowledge graph solutions, advanced analytics) and their application to improve developer velocity, platform reliability, and security capabilities</li><li>
Exposure to specialized security domains like AI Security, SaaS Security, and API Security, with an understanding of the unique challenges and tools in these areas</li></ul><h2 class="jobSectionHeader">
Supervisory Responsibilities</h2><ul><li>
This job does not have supervisory duties.</li></ul> 
#LI-JJ1
Skills
Agile Methodology, Analytical Thinking, CI/CD, Cloud-Native Architecture, Cybersecurity Controls, DevOps, Enterprise Software Architecture, Platform Development, Product Security, Software Engineering, Strategic Advisory, Technical Leadership, Zero Trust Architecture
Compensation
Compensation offered for this role is $160,000 &ndash; 230,000 annually and is based on experience and qualifications.
The candidate(s) offered this position will be required to submit to a background investigation.
Joining our team isn&rsquo;t just a job &mdash; it&rsquo;s an opportunity. One that takes your skills and pushes them to the next level. One that encourages you to challenge the status quo. One where you can shape the future of protection while supporting causes that mean the most to you. Joining our team means being part of something bigger &ndash; a winning team making a meaningful impact.
Allstate generally does not sponsor individuals for employment-based visas for this position.
Effective July 1, 2014, under Indiana House Enrolled Act (HEA) 1242, it is against public policy of the State of Indiana and a discriminatory practice for an employer to discriminate against a prospective employee on the basis of status as a veteran by refusing to employ an applicant on the basis that they are a veteran of the armed forces of the United States, a member of the Indiana National Guard or a member of a reserve component.
For jobs in San Francisco, please click &ldquo;here&rdquo; for information regarding the San Francisco Fair Chance Ordinance. 
For jobs in Los Angeles, please click &ldquo;here&rdquo; for information regarding the Los Angeles Fair Chance Initiative for Hiring Ordinance.
To view the &ldquo;EEO Know Your Rights&rdquo; poster click &ldquo;here&rdquo;. This poster provides information concerning the laws and procedures for filing complaints of violations of the laws with the Office of Federal Contract Compliance Programs.
To view the FMLA poster, click &ldquo;here&rdquo;. This poster summarizing the major provisions of the Family and Medical Leave Act (FMLA) and telling employees how to file a complaint.
It is the Company&rsquo;s policy to employ the best qualified individuals available for all jobs. Therefore, any discriminatory action taken on account of an employee&rsquo;s ancestry, age, color, disability, genetic information, gender, gender identity, gender expression, sexual and reproductive health decision, marital status, medical condition, military or veteran status, national origin, race (include traits historically associated with race, including, but not limited to, hair texture and protective hairstyles), religion (including religious dress), sex, or sexual orientation that adversely affects an employee's terms or conditions of employment is prohibited. This policy applies to all aspects of the employment relationship, including, but not limited to, hiring, training, salary administration, promotion, job assignment, benefits, discipline, and separation of employment.</div>

Platform Consultant - Product Security

Openkyber

<div>Greetings from OpenKyber! We reaching out about an exciting Direct client opportunity with one of our clients. Please review the requirements and let me know if you are interested in this position? Direct client Req:: Need Sr Application Security Architect &amp; Engineer Hybrid , VA PLEASE SEND THE RESUMES TO hirings@openkyber.com ! Job Description: Description: ABOUT THE ROLE Virginia Tax is seeking an Application Security Engineer (ASE) with 5+ years of experience to join the Office of Technology under Joint Security Operations. In this role, the ASE serves as a dedicated security partner to application teams, providing guidance on secure design, vulnerability management, and secure development practices. The ASE works collaboratively across the SDLC to ensure security is embedded into application design, development, testing, and deployment. This includes supporting compliance requirements, delivering training and education, and assisting teams with vulnerability remediation efforts. The successful candidate will identify and recommend improvements to improve the security of all Virginia Tax applications, promote secure coding and development practices, and contribute to ongoing initiatives that reduce risk and strengthen the agency s overall security posture. Responsibilities include but not limited to: Provide security guidance, training, and best practices for development and operations teams. Support secure software development by applying knowledge of SDLC, Agile, and Scrum methodologies. Evaluate software architecture and design for security risks and alignment with DevSecOps principles. Promote and enforce secure coding standards and guidelines. Review source code to identify vulnerabilities and recommend remediation strategies. Assess security risks across multiple programming languages (e.g., JavaScript, C#, Java, Ruby, SQL). Analyze and secure modern web application architectures, including cloud, APIs, microservices, and client server models. Identify and address common vulnerabilities, including those outlined in the OWASP Top 10. Support vulnerability remediation, patch management, and continuous improvement efforts. Utilize application security testing tools such as SAST, DAST, IAST, and platforms like Accunetix, Veracode, Jenkins, Splunk, Rapid7, and Tenable. Interpret and act on findings from SIEM systems, including Splunk. Apply knowledge of common security controls and frameworks. Ensure compliance with relevant security regulations and standards (e.g., NIST 80053, IRS Pub 1075, PCIDSS). Implement and evaluate AWS cloud security controls and best practices. Create, maintain, and review System Security Plans (SSPs). Troubleshoot and resolve complex technical and security-related issues. Stay current with evolving threats, technologies, and industry trends. Develop detailed plans and communicate risks, impacts, and recommendations effectively. Collaborate with application teams, QA engineers, and operations teams to integrate security into workflows. Provide constructive, actionable feedback to application teams. Communicate technical concepts clearly to both technical and nontechnical audiences. Work closely with other security analysts and technology teams to support agency and enterprise security initiatives. Manage multiple tasks, prioritize effectively, and meet deadlines. Apply critical thinking to evaluate and mitigate security risks and vulnerabilities. Required Skills/Experience: Five or more years experience in application security. Two or more years network or firewall/AWS Security Groups. Experience with log collection, vulnerability scans and remediation, or privileged access management. Strong understanding of security concepts, network protocols, and threat vectors. Proficiency in SIEM,IDS/IPS, EDR,and other relevant security tools. Excellent analytical and problem-solving skills. Strong communication, collaboration, and documentation skills. Ability to work independently and as part of a team in a fast-paced environment. Have experience and a strong knowledge of the following: Splunk, InsightVM Rapid7, Tenable, CyberArk, Jenkins, Veracode Linux and Windows Operating Systems, Baseline hardening of operating systems IIS and Apache, Scripting Languages and SQL, PowerShell, Firewall At least one of these certs below is REQUIRED: CompTIA Security+ ISC2 CC (Certified in Cybersecurity) Offensive Security Certified Professional (OSCP) CCSP (Certified Cloud Security Professional) CSSLP (Certified Secure Software Lifecycle Professional) At least one of these certs below is highly DESIRED (Independently and or with one of the above) AWS Solutions Architect (Associate/Professional) AWS Security Specialty At least one of the any is DESIRED CompTIA PenTest+ Certified Ethical Hacker (CEH), GIAC Certified Intrusion Analyst (GCIA Fill the above skills in the below box and have consultant to complete SKILLS MATRIX Skill Required Amount of Experience Experience Application Security Required 5 Years Network or Firewall/AWS security Groups Required 2 Years Infrastructure as Code (IaC): Advanced proficiency in Terraform for multi-account landing zones and automated provisioning. Required 2 Years Experience with log collection, vulnerability scans and remediation, or privileged access management Required 4 Years Proficiency in SIEM, IDS/IPS, EDR, and other relevant security tools. Required 4 Years Networking &amp; Hybrid Connectivity: Solid understanding of routing, firewalls, AWS Direct Connect, and VPNs in a hybrid cloud environment. Required 4 Years One REQUIRED: CompTIA Security+, ISC2 CC (Certified in Cybersecurity), Offensive Security Certified Professional (OSCP), CCSP, or CCLP. UPLOAD COPY!! Required CI/CD &amp; DevOps: Experience with GitLab CI/CD, Jenkins, or AWS CodePipeline for automated, secure deployments. Highly desired 5 Years Splunk, InsightVM Rapid7, Tenable, CyberArk, Jenkins, Veracode Highly desired 2 Years Linux and Windows Operating Systems, Baseline hardening of operating systems Highly desired 2 Years IIS and Apache, Scripting Languages and SQL, PowerShell, Firewall Highly desired 2 Years One highly DESIRED (Independently and or with one of the above): AWS Solutions Architect (Associate/Professional) or AWS Security Specialty Highly desired One of these is DESIRED: CompTIA PenTest+, Certified Ethical Hacker (CEH), or GIAC Certified Intrusion Analyst (GCIA) Highly desired OpenKyber Austin, TX 78727| Direct: OpenKyber is an Affirmative Action/Equal Opportunity Employer that supports workplace diversity. All employment decisions are made without regard to race, color, religion, sex, national origin, age, disability, veteran status, marital or family status, sexual orientation, gender identity, or genetic information. All OpenKyber staff must be able to demonstrate the legal right to work in the United States. OpenKyber is an E-Verify employer
For applications and inquiries, contact: hirings@openkyber.com</div>

OCI Cloud Security Engineer

Apple

Do you love working on highly scalable and secure distributed applications? Does the idea of a fast-paced environment make your heart leap? Do you want your technical abilities to be challenged every day and for your work to make a difference in the lives of millions of people? If so, the Product Engineering Systems team is looking for dedicated hands-on Security Engineers who are not afraid to share knowledge, think creatively, and question assumptions. In this role, you will be part of a cohesive, fast-moving team responsible for various systems supporting Apple&rsquo;s R&amp;D organizations. Join us to do the best work of your life with a welcoming, diverse, and hard-working group of engineers. Bring passion and dedication to the job, and there&rsquo;s no telling what you could accomplish! 
 
Description 
 
We are seeking a motivated and technically adept Security Engineer to join our Software Engineering team. As a key member of our security-focused initiatives, you will contribute to the development, implementation, and maintenance of security measures within our software systems. This role provides an excellent opportunity for professional growth in the field of cybersecurity.&quot;,&quot;responsibilities&quot;:&quot;Software Security Development: Collaborate with the software development team to integrate security best practices into the software development lifecycle. Implement and review secure coding practices to identify and remediate vulnerabilities. 
 
Threat Modeling: Conduct threat modeling exercises to identify potential security risks in software applications. Work closely with development teams to prioritize and address security concerns based on threat assessments. 
 
Code Review and Analysis: Perform regular code reviews to identify and mitigate security vulnerabilities. Utilize static and dynamic analysis tools to assess the security posture of software code. 
 
Incident Response: Assist in responding to security incidents, conducting investigations, and implementing corrective actions. Work collaboratively with the incident response team to improve incident detection and response capabilities. 
 
Security Awareness: Contribute to security awareness training for software development teams. Stay updated on the latest security trends, vulnerabilities, and industry best practices. 
 
Analytical &amp; Automation Mindset: We seek candidates with strong analytical skills to effectively address complex security challenges and derive actionable insights. An automation mindset is also valued, as candidates who can automate security processes contribute to efficiency, proactive threat detection, and reduced manual errors. 
 
We promote innovation and use of new technology to further improve our creative output. We&rsquo;re looking for a talented and passionate person to join this amazing team, if you feel this is you, we&rsquo;d love to hear from you. 
 
Preferred Qualifications 
 
Familiarity with security incident response and root cause analysis. 
 
Knowledge of software development lifecycle (SDLC) security practices. 
 
Practical experience of integrating and automating security checks into CI/CD pipeline 
 
Hands-on experience in security technologies and tools, including IAST and DAST. 
 
Experience with security audits, compliance assessments, and remediation efforts. 
 
Relevant certifications such as CISSP, CISM, CEH, or CompTIA Security+. 
 
Education 
 
Bachelor&rsquo;s degree in Computer Science, or equivalent practical experience. 
 
Relevant certifications such as CISSP, CISM, CEH, or CompTIA Security+. (nice to have) 
 
Minimum Qualifications 
 
Programming/scripting skills, and ability to read and audit various programming languages, (Java, JavaScript, Python etc) 
 
Strong knowledge of network security, encryption protocols, access control, and identity management. 
 
Ability to conduct security assessments, vulnerability scans, and penetration tests. 
 
Experience with cloud security principles and technologies, including container security 
 
Apple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant .

Software Development Engineer Security, Enterprise Technology Services

Amazon.com

<div><h2 class="jobSectionHeader">DESCRIPTION</h2>
Invest in your own security at Amazon. You can build tools to push for ever-improving security at one of the world's most influential organizations. 
 
Help protect your data by building security tools within Amazon Security Platform Engineering. We build and manage the tools that Amazon's security teams need to succeed. We bring information to our security partners to help them make the right judgements at the right times. We enable them to automate their own work. We give them what they need to find and stop trouble. 
 
Amazon's security teams work to protect the data of our employees and customers. You may already be an Amazon customer, whether you shop on our retail website or use services built on AWS cloud infrastructure. Build your career and protect your data as a Software Development Engineer with Amazon Security Platform Engineering. 
 
Key job responsibilities 
You will design, implement, and test APIs for managing external software used by our security engineers. You will use AWS services to build highly available infrastructure for these tools. You will implement security controls for our data storage and infrastructure. You will automate deployments, upgrades, and system changes.
 
 
You will partner with security engineers and learn how they use our tools to protect Amazon&rsquo;s operations. You will ensure that our systems can ingest petabytes of incoming data without slowing down. You will participate in oncall operations and keep systems operating for our partners across the company. You&rsquo;ll uncover opportunities to build skills in cloud computing, security, and data engineering. 
 
About the team 
About Amazon Security 
 
Diverse Experiences 
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn&rsquo;t followed a traditional path, or includes alternative experiences, don&rsquo;t let it stop you from applying. 
 
Why Amazon Security? 
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon&rsquo;s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. 
 
Inclusive Team Culture 
In Amazon Security, it&rsquo;s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. 
 
Training &amp; Career Growth 
We&rsquo;re continuously raising our performance bar as we strive to become Earth&rsquo;s Best Employer. That&rsquo;s why you&rsquo;ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. 
 
Work/Life Balance 
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there&rsquo;s nothing we can&rsquo;t achieve.<h2 class="jobSectionHeader">
BASIC QUALIFICATIONS</h2><ul><li>3+ years of non-internship professional software development experience</li><li>2+ years of non-internship design or architecture (design patterns, reliability and scaling) of new and existing systems experience</li><li>Experience programming with at least one software programming language</li></ul><h2 class="jobSectionHeader">
PREFERRED QUALIFICATIONS</h2><ul><li>3+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience</li><li>Bachelor's degree in computer science or equivalent</li><li>Experience in automating, deploying, and supporting infrastructure</li><li>Experience in AWS services</li><li>Experience in Kubernetes, Docker or containers ecosystem, or experience in technical support and experience in software development</li></ul> 
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. 
 
Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company&rsquo;s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records. 
 
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you&rsquo;re applying in isn&rsquo;t listed, please contact your Recruiting Partner. 
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life &amp; AD&amp;D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits. 
USA, CA, San Luis Obispo - 143,700.00 - 194,400.00 USD annually</div>

Software Development Engineer, Amazon Security Platform Engineering

Imagine what you could do here. At Apple, new ideas have a way of becoming extraordinary products, services, and customer experiences very quickly. Bring passion and dedication to your job and there's no telling what you could accomplish. 
 
We&rsquo;re looking for a passionate software engineering manager to join us on FaceTime, SharePlay, Phone, Voicemail, and more! 
 
Our mission: create the best and most trusted way to have a conversation and share an experience when you can't physically be with the most important people in your life. 
 
Description 
 
This team shapes and drives FaceTime's private and secure calling experience. We do this by living on our software, developing defensible opinions on what to build and what to change, having empathy for the countless users in the world who rely on us every day, and protecting them from the people who would exploit that trust.&quot;,&quot;responsibilities&quot;:&quot;Leading a team of engineers that builds and ships features strengthening the security, privacy, and safety of FaceTime and Phone across iOS, macOS, and beyond. 
 
Identifying and driving improvements that protect users from spam, scams, and other abuse across our communication products. 
 
Growing engineers into technical leaders who can own complex, cross-functional projects independently. 
 
Making sound technical decisions across your team's area: balancing security improvements, user experience, backward compatibility, and release timelines. 
 
Shaping product direction by partnering with peer engineering teams, design, security engineering, product marketing, and senior software leadership to define what trustworthy communication means for our users, and then building it. 
 
Preferred Qualifications 
 
You have interest in or exposure to security and privacy topics, such secure coding practices, encryption, threat modeling. If not familiar, you have curiosity, drive, and ability to develop technical depth in security and privacy. 
 
You have familiarity with networking systems: peer-to-peer, client-server, or low-latency communication architectures 
 
You have experience with secure communication protocols, especially in handling untrusted data or operating in adversarial environments. 
 
You have interest in or experience with abuse prevention, anti-spam, or fraud detection in communication or platform products. 
 
Minimum Qualifications 
 
You care about helping others grow in their careers at Apple. 
 
You have experience hiring, developing, and retaining a diverse team of engineers. 
 
You prioritize building an inclusive team culture where everyone can be heard and the best ideas are the ones we pursue. 
 
You know how to break down ambiguous problems into shippable projects and manage execution across release cycles. 
 
You have strong communication and collaboration skills. 
 
You have strong software engineering skills and can act as an arbiter for tough technical debates. 
 
You aspire to take an Apple-wide perspective in making decisions. 
 
You have experience shipping software on Apple platforms and can engage deeply with system architecture and design. 
 
You have demonstrated experience using AI-assisted development tools to meaningfully accelerate engineering work and have helped your team adopt these tools at scale. 
 
Apple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant . 
 
Pay &amp; Benefits 
 
At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $141,400 and $283,700, and your base pay will depend on your skills, qualifications, experience, and location. 
 
Apple employees also have the opportunity to become an Apple shareholder through participation in Apple's discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards, and can purchase Apple stock at a discount if voluntarily participating in Apple's Employee Stock Purchase Plan. You'll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses - including tuition. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. Learn more about Apple Benefits. 
 
Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.

Software Engineering Manager, Calls Security

Embedded within Apple&rsquo;s Security Engineering &amp; Architecture organization, the Data Protection team&rsquo;s mission is to ensure the confidentiality of our user&rsquo;s data at rest, by using Apple&rsquo;s hardware and software to deliver world-class storage encryption and device unlock mechanisms. At the heart of an organization that builds the most secure operating system in the world and putting it in the hands of millions of customers, the team is looking for a motivated software engineer to help push its technologies to the next level! 
 
Description 
 
You will join a team that provides operating system security foundations across all of Apple&rsquo;s innovative products, including Mac, iPhone, iPad, Apple Watch, and Apple TV. You will contribute to the entire system, from the kernel up through libraries, frameworks, and applications. As an engineer, you will have the opportunity to majorly impact the design and implementation of Apple&rsquo;s embedded and desktop operating system products, collaborating closely with all other security partners, ranging from our Silicon Engineering group to our Cloud Services group. Successful candidates will be capable of tackling challenging wide-ranging engineering problems anywhere in the software stack, determining the appropriate compromise between several often competing factors such as ease of use, performance, and of course security. 
 
In this role you will: 
 
Help define the security properties and architecture for the next-generation operating system 
 
Design and implement new approaches to user data protection, storage encryption, and trusted execution environments to help protect our customers&rsquo; data while preserving ease-of-use and enabling Apple to develop one of the richest platforms on the market. 
 
Come up with new and innovative ways of increasing security and privacy while preserving ease-of-use and improving the quality of the user experience 
 
Work cooperatively with other parts of Apple on multi-functional technologies and initiatives to enhance security 
 
Drive adoption of these technologies across the organization 
 
Preferred Qualifications 
 
Understanding of past, current, and emerging security exploits 
 
iOS and macOS exposure (end user, administrator, developer) 
 
Kernel programming 
 
Hypervisor design and architecture 
 
Involvement in open source technologies and development communities such as FreeBSD and Linux 
 
Minimum Qualifications 
 
Excellent C and systems programming skills 
 
Strong understanding of operating systems internals 
 
Industry exposure to and knowledge of OS security and applied cryptography 
 
Ability to deliver solid work on tight schedules 
 
Excellent teamwork skills. We work with all engineering teams involved in these products, and on all of their code 
 
Apple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant . 
 
Pay &amp; Benefits 
 
At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $126,800 and $220,900, and your base pay will depend on your skills, qualifications, experience, and location. 
 
Apple employees also have the opportunity to become an Apple shareholder through participation in Apple's discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards, and can purchase Apple stock at a discount if voluntarily participating in Apple's Employee Stock Purchase Plan. You'll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses - including tuition. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. Learn more about Apple Benefits. 
 
Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.

Security Software Engineer, Data Protection

Embedded within Apple&rsquo;s Security Engineering &amp; Architecture organization, the Data Protection team&rsquo;s mission is to keep our customer&rsquo;s on-device content secure even when lost, stolen, or confiscated. We are seeking an experienced security engineering manager to lead this team of talented engineers responsible for designing, developing, and maintaining Data Protection technologies while balancing security, performance, and usability. 
 
These technologies comprise content encryption at rest, passcode security, software attestation, key management, boot security, and more. They span from system-on-a-chip and accessory hardware through Secure Enclave, kernel, and userland software. The team works closely with other engineering teams across Apple to ensure seamless integration of Data Protection into all of our products: Mac, iPhone, iPad, Apple Watch, Apple TV, Vision Pro. 
 
We design and secure software for hundreds of millions of users. We make products that people LOVE. We are committed to user privacy and security. We have some of the most creative, passionate, hardworking engineers in the industry. We challenge each other to go beyond the norm to find new, innovative ways of solving problems and to make software safer, easier, and more fun to use. Not many jobs can offer all of these things. Security engineering jobs at Apple do, and much more. 
 
Description 
 
As the leader of this team, you will push Data Protection technologies to the next level. You will: 
 
Work with cross-functional teams across Silicon Engineering, Software Engineering, and Product Management, to define and implement security solutions that balance competing factors such as ease of use, performance, and of course security. 
 
Collaborate with our Silicon Engineering group on new hardware and products. 
 
Create practices that set new benchmarks in software assurance. 
 
Transform the developer experience to ensure the application of the highest content protection possible. 
 
Anticipate and stay ahead of evolving threats and vulnerabilities. 
 
Build robust recovery mechanisms that safeguard customer data. 
 
Encourage and guide your team members to reach their full potential in impact, influence, and long-term career success. 
 
Preferred Qualifications 
 
Strong understanding of operating systems internals, and experience with systems programming 
 
Strong understanding of applied cryptography, access control, and other security mechanisms 
 
Programming background, in C, C++, Objective-C, and/or Swift 
 
An understanding of past, current, and emerging security exploit trends 
 
Minimum Qualifications 
 
5+ years leading security/software teams 
 
Excellent skills for coaching team members and fostering partnerships across organizational boundaries 
 
Track record of shipping pragmatic security technologies in customer-facing services or products 
 
Highly professional attitude, with the ability to deliver solid work on tight schedules with a high bar for quality 
 
Apple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant . 
 
Pay &amp; Benefits 
 
At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $198,300 and $342,800, and your base pay will depend on your skills, qualifications, experience, and location. 
 
Apple employees also have the opportunity to become an Apple shareholder through participation in Apple's discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards, and can purchase Apple stock at a discount if voluntarily participating in Apple's Employee Stock Purchase Plan. You'll also receive benefits including: Comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and for formal education related to advancing your career at Apple, reimbursement for certain educational expenses - including tuition. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. Learn more about Apple Benefits. 
 
Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.

Software Engineering Manager, Security

Search 10000+ Software security consultant jobs near you this April. New roles added regularly across leading industries. Apply today.