Help define the security properties and architecture for the next-generation operating system. Design and implement new approaches to securing device boot flow, authenticating OS assets, code signing, execution monitoring, and malware mitigation to help protect our customers while enabling Apple to develop one of the richest platforms on the market. Come up with new and innovative ways of increasing security and privacy while preserving ease-of-use and growing the quality of the user experience. Work cooperatively with other parts of Apple on technologies and initiatives to improve security and drive the adoption of these technologies across the organization.
Requirements
A passion for crafting effective and pragmatic security technologies in the operating systems arena
Experience with at least one constrained runtime environment such as system boot, EFI, firmware, embedded OS, or real-time OS
Initiative to provide architectural mentorship to teams lacking resident security expertise
Ability to critically analyze security properties of a system via a threat model
Understanding of past, current and emerging security exploits
Ability to delivery proven work on tight schedules
Excellent collaboration skills
5 years of experience as a Software Engineer in a Systems Programming or Kernel Development role
Strong understanding of operating systems internals
Industry knowledge of OS security and applied cryptography (PKI, Attestations, Public Key Signatures)
Excellent C and Systems programming skills including secure development practices
Pay & Benefits
Note: Apple benefit, compensation and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.
Additional Information
Apple's Trusted Execution team in the Security Engineering and Architecture organization builds the technology that keeps our users safe and care-free while running the software that they want. Our software runs on the execution path for every program on all of our products. We're often referred to as the first line of defense in Apple's defense-in-depth strategy. Our products are infamous within the security community, and each year we push them to the next level. We're a small team with a huge impact.
As an engineer joining this team, you would be contributing to the entire system. Interacting with Apple's unique CPU features directly, through the kernel, up through libraries, frameworks and applications. You will have an opportunity to define, design and implement new security technologies for Apple's next generation operating systems and products.
Successful candidates will be capable of pursuing challenging wide-ranging engineering problems anywhere in the software stack, determining the appropriate compromise between several often competing factors such as ease of use, performance and of course security. Our environment fosters product innovation, rapid product iteration, and a liberating amount of autonomy in which you will be expected to create and quickly bring to market new security methods and technologies to address the complex needs of mobile and distributed computing. The position will require you to interact with and influence many people from several organizations within and outside the company. If you have an interest or background in this area, we'd love to hear from you.
Apple · Cupertino, CA