Senior Cloud Security Engineer - Design Review

What you'll do

• Conduct comprehensive security reviews and threat modeling for engineering projects.
• Develop standard methodologies based on insights from security engagements.
• Define, automate, and advocate for platform-wide security improvements.
• Establish relationships with teams to drive security enhancements across Apple.
• Use data to optimize security review processes and prioritize high-value engagements.
• Responsible for security decisions impacting millions of users in internet-facing services.

What we're looking for

• 5+ years of experience in conducting security reviews, threat modeling, and communicating risk.
• Demonstrated expertise in securing major cloud platforms (AWS, GCP, AliCloud) in production environments.
• Deep knowledge of cloud-native security controls including IAM, network security, encryption, and logging services.
• Experience using policy-as-code frameworks to enforce security guardrails at scale.
• Strong background in third-party risk assessment and vendor security reviews with actionable remediation guidance.
• Ability to develop clear security requirements and design documentation for complex cloud environments.
• Proficiency in a programming language such as Python, Java, Go, or Swift.