Information Systems Cybersecurity Engineer (Threat Modeling), Enterprise Systems

The people here at Apple don’t just build products – we craft the kind of wonder that’s revolutionized entire industries! It’s the diversity of those people and their ideas that support the innovation that runs through everything we do, from amazing technology to industry-leading environmental efforts. Join Apple and help us leave the world better than we found it.

As a part of Apple’s Information Systems & Technology team, the Cybersecurity Engineer will design and deliver solutions that improve the security, privacy, and compliance of one of the world’s largest and most powerful SAP environments. You are someone eager to apply your deep security expertise to a sophisticated landscape and leave a legacy of powerful transformation that will enable Apple’s worldwide operations for years to come.

Description

You will be a technical security authority responsible for testing the security and integrity of services that enable Apple’s Treasury and Global Supply Chain! You will work with engineers, project teams, and business liaisons to perform effective analysis and a detailed understanding of the operating environment at the technical level and gain an understanding of the business value-at-risk. You will threat model existing and proposed environmental changes, identify security vulnerabilities, and document recommended security enhancements to ensure that security, privacy, and compliance goals are met.

You will design and perform security penetration tests on various Enterprise System platforms to simulate probable attack patterns, to validate control effectiveness. You will share the results of your work with developers, engineers, and project teams and promote changes vital to improving our risk posture.

Minimum Qualifications
Minimum Qualifications

Key Qualifications

• Outstanding ethical standards and integrity
• Highly reciprocal and excellent communicator (written & verbal)
• Passionate about security and privacy research, technologies, and methods
• Motivated by difficult and novel problems in a highly complex, ground-breaking environment
• Familiarity with tools and threat models for sophisticated landscapes and operating environments
• Proficient in building security toolchains and scripting own automation
• Proficient in conducting solution architecture security design reviews
• Experienced in designing offensive security test cases and performing manual & automated attack simulations to test control effectiveness

Preferred Qualifications
Preferred Qualifications

Education & Experience

Bachelor or Master/PhD in Computer Science or Engineering with an emphasis in Computer Security or a related field, or equivalent experience.

Additional Requirements

• – Possess an understanding of past and emerging security exploits, threat actor motivations, and trends
• – Understanding of cloud technologies, security compliance frameworks, security engineering, software delivery, and SDLC in a hybrid environment.
• – 6+ years of experience working with engineering teams to build and deliver secure environments, with 2+ Years of adversary simulation testing experience with a variety of tools and techniques
• – Desirable Certifications: GPEN, GEVA, GWAPT, GCPN, GXPN, GPYC

More

• Apple is an equal-opportunity employer that is committed to inclusion and diversity. We take affirmative action to ensure equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant.