Senior Security Software Engineer, Software Supply Chain Security

Apple Inc

Confirmed live today High trust

Quick summary

Work type
On-site
Location
Seattle, WA
Salary
$175,000–$308,500 / yr
Posted
61 days ago
Freshness
Confirmed live today

Market check

Salary context

Above market

How this pay compares to similar roles

Similar $185k
This role $242k
$124k $328k
below market most similar roles pay here above market

This role pays more than 93% of similar roles. Most pay $154,600–$216,262 — the blue band above. At the midpoint, this role pays about $242k versus about $185k for comparable roles.

Based on 240 similar postings.

Employer

About Apple Inc

Apple Inc. is a multinational technology company known for designing and manufacturing consumer electronics, software, and online services, including the iPhone, Mac, iPad, and App Store. Industry: Consumer Electronics & Software

Apple Inc currently has 3497 open roles on FindRole.

Listed pay typically runs $174,149–$277,600 across 2702 roles with salary data.

Most-posted roles

View all roles at Apple Inc

At a glance

TL;DR · Senior Security Software Engineer, Software Supply Chain Security

The Senior Security Software Engineer, Software Supply Chain Security joins the Dependency Risk & Automation Team within Apple Services Engineering. This senior role involves taking technical ownership of software composition analysis, vulnerability intelligence, and automation systems. You will model and correlate software inventory and vulnerability data, set engineering quality bars, and mentor engineers on reasoning about supply chain risk. Key responsibilities include managing dependency ecosystems for Go and Java, utilizing SBOM standards like CycloneDX and SPDX, and processing feeds from NVD, OSV, and GitHub Advisories. You will address the specific challenge of securing dependencies introduced by AI coding assistants and agents. Required skills include experience with CI/CD pipelines, Kubernetes, AWS, and graph-based data modeling to turn raw vulnerability signals into prioritized, actionable risk information.

What you'll do

  • Model and correlate software inventory and vulnerability data across a large, heterogeneous estate of projects.
  • Turn raw vulnerability feeds and SBOMs into prioritized, trustworthy risk signals for engineering teams.
  • Define security standards for dependencies generated by AI coding assistants and autonomous agents.
  • Design and operate automated dependency curation or allow-listing systems at scale.
  • Make architectural decisions regarding software composition analysis and vulnerability intelligence platforms.
  • Mentor engineers on reasoning about software supply chain risks and technical tradeoffs.
  • Integrate security signals from build systems, package registries, and various vulnerability data sources.

What we're looking for

  • 8+ years of experience in security software engineering with end-to-end ownership of a system or platform.
  • Hands-on experience in software supply chain security, dependency management, and OSS risk.
  • Deep proficiency in Go and strong proficiency in Java, including Go Modules and Maven/Gradle ecosystems.
  • Experience with SBOM standards, software composition analysis (SCA) tooling, and vulnerability data sources.
  • Track record of technical leadership in driving architecture decisions, setting technical direction, and mentoring engineers.
  • Experience with software delivery pipelines (CI/CD, build systems) and cloud/container infrastructure like Kubernetes or AWS.
  • Practical, hands-on experience with AI coding assistants and an understanding of AI-specific supply chain risks.
  • Familiarity with CycloneDX, SPDX, SLSA, and graph-based data modeling (preferred).

More like this

Similar roles

Senior Software Engineer, Security

Apple Inc

Seattle, WA 13 days ago $175,000–$308,500
Python Go Java LLM Agentic Systems CI/CD Distributed Systems gRPC Linux Bash Containerization Dynamic Analysis Taint Analysis Artifact Signing Data Pipelines
10+ yrs exp

Senior Software Engineer, Identity Security

Salesforce

San Francisco, CA +3 19 days ago $172,500–$260,100
AWS Kubernetes Python Go Distributed Systems APIs Service Architecture Identity and Access Management Security Fundamentals Secure Software Development Monitoring Alerting SLOs
5+ yrs exp Hybrid

Software Supply Chain Security Engineer

State Street

Quincy, MA +4 54 days ago
AppSec DevSecOps Software Supply Chain Security CI/CD Java .Net Python Node.js AWS Azure Kubernetes Terraform Ansible JFrog Artifactory Maven Central PyPI SLSA Infrastructure as Code SSDLC
6+ yrs exp

Senior Security Software Engineer

Electronic Arts

Austin, TX +1 33 days ago
Node.js .NET Rust PHP React Angular Next.js TypeScript Kubernetes AWS EKS ECS Fargate CI/CD GitLab CI ArgoCD GitOps Infrastructure-as-Code SRE Observability
10+ yrs exp Hybrid