Sr Security Operations (SecOps) Engineer

About the role

We are looking for an experienced Senior Security Operations (SecOps) Engineer to help define and drive the security strategy for applications, cloud infrastructure, and engineering platforms. We are particularly interested in a hands-on engineer who can build and integrate reusable security platforms, automation, and intelligent controls that make security proactive and scalable as software and AI-enabled systems evolve. You will serve as a senior technical security partner to application engineering, DevOps, Site Reliability Engineering, platform engineering, and Apple Information Security teams. Sales and Operations Engineering is part of IS&T and drives the technology behind Apple's global operations, sales, and supply chain. The team connects the systems that move products from factory to customer — bridging sales platforms with the operational infrastructure that keeps Apple running at scale and ensuring Apple's technology and business priorities move in lockstep.

DESCRIPTION

In this role, you will lead complex security assessments and threat modeling, define scalable security controls, influence application and infrastructure architecture, and develop automation that enables security to be embedded throughout the software development lifecycle. You will identify systemic security risks and create engineering solutions that improve security across multiple applications and teams rather than relying on manual or application-specific controls. You will connect security signals to application ownership, business context, and engineering workflows so that teams can prioritize and remediate the risks that matter most. You will combine deep security expertise with software, cloud, and infrastructure engineering experience to help teams design and operate secure systems at scale. You will also evaluate how AI-assisted and agentic workflows can responsibly improve security analysis, detection, triage, and remediation, while helping teams manage the new risks introduced by AI-enabled applications and agents.

MINIMUM QUALIFICATIONS

8+ years of experience in security engineering, application security, cloud security, DevSecOps, infrastructure security, security operations, or a related engineering discipline. 8+ years of experience leading security reviews, threat modeling, risk assessments, and remediation of complex distributed or cloud-native systems. 8+ years of experience in application security, cloud security, identity and access management, network security, vulnerability management, and secure software development. 5+ years of experience in securing production environments in AWS, GCP, or another major cloud platform. 5+ years of experience in programming or automation experience (for example Python, Go, or Java), including building integrations, services, or repeatable engineering workflows. 5+ years of experience in integrating security capabilities into at least one of CI/CD, developer workflows, infrastructure-as-code, or production engineering systems. Bachelors Degree in Computer Science or equivalent experience.