← All jobs

Apple designs electronic devices, operating systems and digital services including iPhone, Mac and App Store.

Information about Apple
Official domain
apple.com
Open jobs
168

Job details

The full description published by Apple.

View original job listing ↗

As part of Apple's Security Engineering & Architecture (SEAR) organization, you'll join our mission to create the world's most secure products. We build groundbreaking tools that empower our security researchers to deeply analyze Apple's codebases and frameworks and surface security concerns efficiently and at scale. Fuzzing is one of the most effective ways we find vulnerabilities before attackers do.

We are building the next generation of our fuzzing infrastructure, and we are seeking a DevOps Software Engineer to help develop it, deploy it, and keep it running reliably for the teams that depend on it. By combining infrastructure and software development, you will directly contribute to our mission to create the world's most secure products. A strong candidate for this role is passionate about building reliable, secure, and scalable infrastructure that directly amplifies security research impact.

You will work closely with security researchers and fuzzing engineers, located worldwide, on a new fuzzing platform that runs large fleets of fuzzing jobs across heterogeneous targets, from userland libraries to full-system and device fuzzing. You will take part in the complete journey: from architecture and implementation of the platform's core services, through build and deployment, to ongoing reliable operation. You will help migrate existing fuzzing campaigns onto the new platform and make it simple for researchers to onboard new targets.

On the development side, you will contribute to the platform's services, APIs, and integrations, and harden research code for scale. On the infrastructure side, you will design containerized deployments, establish CI/CD pipelines, implement secrets management and access controls, and build the monitoring and observability that tell us whether campaigns are actually making progress (coverage, throughput, crash rates, worker health).

  • Develop and maintain the components of the fuzzing infrastructure: job scheduling, worker orchestration, corpus and crash storage, result aggregation and triage pipelines.
  • Build and operate CI/CD for the platform itself and for the fuzzing targets that run on it (reproducible builds, artifact versioning, safe rollouts and rollbacks).
  • Secure the platform. Fuzzing runs untrusted, crashing, and potentially malicious inputs, so isolation, network egress control, authentication, and auditability matter.
  • Define and monitor the metrics that show campaign health, and detect stalled or degraded fuzzers early.
  • Support researchers: gather requirements, onboard targets, and communicate progress and impact to engineers, managers, and leaders across the organization.
  • Challenge our design choices and help keep the platform maintainable as it grows. You will bring equal rigor to code quality, security posture, and operational excellence, balancing all three to maximize SEAR's ability to proactively secure Apple products at scale. Experience designing and operating cloud and on-premises service infrastructure, with advanced knowledge of containerization, Kubernetes, CI/CD, data storage, networking, authentication/authorization (OIDC, OAuth), queuing, logging, and monitoring. Advanced knowledge of scripting and programming languages, including Python and Bash. Familiarity with fuzzing concepts and tooling (e.g., AFL++, libFuzzer, coverage-guided fuzzing, sanitizers, crash triage and deduplication) Self-starter with strong ownership, accountability, and the ability to work autonomously and collaboratively across teams and organizations in a fast-paced environment. Experience building or operating security research tooling, or large-scale batch/distributed compute systems Experience with and/or strong enthusiasm for security, especially offensive security Experience with large-scale data pipelines and storage systems (corpora, crash artifacts, coverage data) Familiarity with AI/ML workflows and agents

Requirements

  • Expérience en conception et exploitation d’infrastructures de services cloud et sur site
  • Connaissances avancées en conteneurisation
  • Connaissances avancées en stockage de données
  • Connaissances avancées en réseau
  • Connaissances avancées en authentification et autorisation
  • Familiarité avec les concepts et outils de fuzzing
  • Expérience dans les outils de recherche en sécurité ou les systèmes de calcul distribué à grande échelle

Apply for this job

How do I apply?

The job is published on Apple’s website. Open the original posting ↗ to submit your application. Screeningpass does not fill in a form for you.

Who should you write to at Apple about this role?

Start a contact search from this page. Screeningpass suggests up to three people connected to the role. Choose whom to write to, then Screeningpass looks for their professional email and prepares a message. You review it and send it yourself with Gmail. An email address is not always available, and a reply is never guaranteed.

How much does finding a contact cost?

A search costs 1 credit. Your credit is returned if the search fails. Signing up gives you 3 credits, enough for 3 searches.

What does Screeningpass do?

Screeningpass brings together internships, apprenticeships and jobs published by companies. For a job, Screeningpass finds someone to contact at the company, looks for their professional email and prepares a message using your CV. See how it works in detail.