security engineer for Apple Pay

The Wallet & Payments Security Solutions team builds the foundational security layer for products in the Apple Pay portfolio. It enables secure engineering across a Kubernetes-based multi-cloud platform and supports Payments, Transit, Access, and Identity products.

• Develop internal frameworks, libraries, tools, and processes that make secure development the easiest path for engineers on the platform
• Design and implement security frameworks, controls, tooling, and automation for a Kubernetes-based multi-cloud platform serving Wallet & Payments Engineering
• Champion secure-by-default infrastructure patterns and drive adoption of safe engineering practices across the organization without sacrificing developer velocity
• Partner with platform, product, and infrastructure engineering teams to identify security risks and deliver pragmatic architectural mitigations
• Conduct threat modeling for new platform capabilities and incorporate security during early development phases
• Respond to and lead resolution of incidents affecting developer platform security, and conduct thorough post-incident reviews
• Use coding agents and LLM-based tooling as part of development and own the correctness of shipped work
• Collaborate with security engineers and architects across Apple to identify, define, and design security solutions that improve the security profile of Apple Services

• Experience in platform security, infrastructure and application software engineering, or a closely related security engineering discipline
• Experience with Go, Kotlin/Java, and Spring Framework
• Ability to communicate complex technical concepts clearly in writing and verbally with diverse audiences, including global teams
• Passion for developer enablement and building security as a product
• Tenacity and perseverance to drive complex projects from conception to production
• Будет плюсом: a BS in Computer Science or equivalent application development and security experience or skills, experience contributing to or driving secure-by-default platform initiatives across large engineering organizations, Identity and Access Management frameworks, Kubernetes security including RBAC, admission control, pod security standards, network policy, and workload identity, security controls across at least two major cloud providers, container and orchestration hardening, supply chain security and vulnerability management, identity protocols and applied cryptography including OAuth2, OIDC, JWT, SAML, mutual TLS, PKI, encryption and signing primitives, coding agents and LLM-based development tooling

• Registered Disability Confident employer; reasonable accommodations are available
• Apple considers qualified applicants with criminal backgrounds in accordance with applicable law