Security Engineer

Security Engineer Security will have the opportunity to work with the engineering leaders, developers, quality engineers, and security teams to secure one of Apple's critical web applications. Responsibilities include assessing the risk landscape for products and helping drive risk mitigation. You will work with partner teams on security tools, penetration testing, and security testing methodologies to keep web app services secured. You will experience a rapidly evolving technology and threat landscape and contribute to the education of teams on compliance activities throughout the development lifecycle. Responsibilities and key success factors include: 4+ years of security engineering experience (3+ years with web application security), scripting in Java/Python, Bash, strong understanding of OWASP, vulnerabilities, cross-side scripting, SQL interaction, and cross-side request forgery, experience working with security compliance tickets for the applications, experience working with Kubernetes, containers, and Docker, experience using web application testing tools, such as Burp, WebInspect, and/or Zap, to scan for vulnerabilities and for penetration testing, strong written and verbal communication skills, 1 year of AWS experience.