This role pays more than
76%
of similar roles. Most pay
$170,637–$247,775
— the shaded band above.
At the midpoint, this role pays about
$253k
versus about
$209k
for comparable roles.
Based on 240 similar postings.
Employer
About Apple Inc
Apple Inc. is a multinational technology company known for designing and manufacturing consumer electronics, software, and online services, including the iPhone, Mac, iPad, and App Store. Industry: Consumer Electronics & Software
Apple Inc currently has
3513 open roles
on FindRole.
Listed pay typically runs
$165,800–$277,600
across 2730 roles with salary data.
As the Vulnerability Response Manager - Apple Information Security, you will lead a geographically distributed team of security engineers across the US and EMEIA regions to protect a vast external perimeter of services. You will manage day-to-day operations including on-call escalation rotations, proactive vulnerability discovery, variant analysis, and the development of custom security tooling and automation. Your role involves overseeing bug bounty programs, coordinating rapid remediation efforts for zero-day threats, and performing penetration testing. To succeed, you must possess expertise in web application security, incident response, and software development using Python, Go, or Bash. You will also navigate complex technical landscapes involving WAF technologies, DNS security, and cloud-native architectures to identify and remediate vulnerabilities before they are exploited by external parties while ensuring continuous operational coverage for critical infrastructure.
Lead and mentor a geographically distributed team of security engineers across the US and EMEIA regions.
Manage continuous vulnerability response operations, including zero-day assessments and rapid remediation efforts.
Oversee proactive discovery programs such as penetration testing, variant analysis, and large-scale scanning.
Manage the lifecycle of external researcher engagement and bug bounty program communications.
Guide the development and maintenance of custom security tools and automation to improve operational efficiency.
Serve as a technical advisor to engineering and product teams to align vulnerability priorities with business goals.
Participate in on-call escalation rotations to ensure 24/7 coverage for critical security risks.
What we're looking for
8+ years of experience in information security with expertise in vulnerability management, web application penetration testing, and incident response.
3+ years of people management experience leading and developing teams of security engineers.
Technical proficiency in web application security and software development skills in Python, Go, or Bash.
Experience managing or contributing to a vulnerability disclosure or bug bounty program.
Experience with enterprise-scale vulnerability scanning tools and methodologies using commercial and open-source solutions.
Ability to manage geographically distributed teams across multiple time zones and participate in on-call rotations.
Excellent written and verbal communication skills to articulate complex security issues to technical and non-technical audiences.
Bachelor's degree in Computer Science, Information Security, or a related field (preferred); experience with cloud-native architectures, WAF, DNS, AI/ML, or relevant certifications (preferred).
Python
Go
C#
C/C++
Rust
Bash
PowerShell
Bugcrowd
HackerOne
Web Application Security
Threat Intelligence
CVSS
AWS
Azure
GCP
infrastructure-as-code
TCP/IP
DNS
HTTP/S
Linux
Windows
macOS
OT Security