Apple
Vulnerability Response Engineer
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Apple is seeking an exceptional Information Security Engineer to support our vulnerability response program. This is a technical, hands-on role in a dynamic and fast-paced environment. Apple's external perimeter spans thousands of internet-facing services relied upon by customers worldwide, and this team is responsible for continuously discovering, analyzing, and remediating vulnerabilities across that infrastructure. You will work with application and system owners to report vulnerabilities, drive remediation, determine associated risks, engage directly with external security researchers, and improve the tooling and processes that allow our response to scale.
DESCRIPTION
You will join a team that passionately stays up to date on emerging security vulnerabilities and threats, keeps a cool head in crisis, and advocates every single day for improving the security of Apple products and services. You will need to have a good technical background, superb communication skills, and a strong interest in network, system, and web security. The role also requires a demonstrable ability to work with incomplete information and to adapt to changing priorities. This is a globally distributed team operating in a continuous response environment. You will collaborate with engineers and around-the-clock support resources across multiple time zones, and you will be trusted to exercise independent judgment on risk, set direction on how we approach entire classes of problem, and see your findings translate into shipped change.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
MINIMUM QUALIFICATIONS
- Familiarity with common security vulnerabilities and the ability to judge their severity and impact to the business, and to articulate that risk clearly to both engineers and senior stakeholders
- Strong penetration testing skills, primarily focusing on web application penetration testing experience and security research, including the ability to identify logic flaws, chained vulnerabilities, and access control weaknesses that automated tooling does not surface
- Excellent knowledge of large-scale security solutions and vulnerability scanning tools, both commercial and open source
- Software development experience with either Python, Go, Rust, and/or Bash scripting, sufficient to build and maintain production security tooling and automation
Get help with your application
Your very own career expert that helps elevate your application to the next level.
PREFERRED QUALIFICATIONS
- Knowledge of the security research community, coordinated disclosure, and bug bounty processes is a strong plus
- Experience in Information Security or a related field, with demonstrable hands-on work in vulnerability assessment, penetration testing, or security engineering
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location