This listing doesn't post a salary. Most similar roles pay
$171,300–$251,750.
Based on 240 similar postings.
Employer
About Apple Inc
Apple Inc. is a multinational technology company known for designing and manufacturing consumer electronics, software, and online services, including the iPhone, Mac, iPad, and App Store. Industry: Consumer Electronics & Software
Apple Inc currently has
3513 open roles
on FindRole.
Listed pay typically runs
$165,800–$277,600
across 2730 roles with salary data.
The Vulnerability Response Manager leads the Vulnerability Response team, managing a geographically distributed group of security engineers across the US and EMEIA regions. This role involves overseeing continuous vulnerability response operations, including on-call escalation, zero-day assessment, and rapid remediation efforts across an extensive external perimeter. The manager is responsible for driving proactive discovery through penetration testing, variant analysis, and large-scale scanning while managing bug bounty programs and researcher engagement. Key responsibilities include developing custom security tools and automation to enhance detection and tracking capabilities. Candidates must possess expertise in web application security, incident response, and vulnerability management. Required technical skills include proficiency in Python, Go, or Bash, along with experience in WAF technologies, DNS security, and cloud-native architectures. The role addresses the critical challenge of identifying and remediating vulnerabilities across thousands of services to protect users.
Lead and mentor a geographically distributed team of security engineers across the US and EMEIA regions.
Manage continuous vulnerability response operations, including zero-day assessments and rapid remediation efforts.
Oversee proactive discovery programs such as penetration testing, variant analysis, and large-scale scanning.
Manage the lifecycle of external researcher engagement and bug bounty program communications.
Guide the development of custom security tools and automation to improve detection and tracking at scale.
Serve as a technical advisor to engineering and product teams to align vulnerability priorities with business goals.
Participate in on-call escalation rotations to ensure 24/7 coverage for critical security risks.
What we're looking for
8+ years of experience in information security with expertise in vulnerability management, web application penetration testing, and incident response.
3+ years of people management experience leading and developing teams of security engineers.
Technical proficiency in web application security and software development skills in Python, Go, or Bash.
Experience managing or contributing to a vulnerability disclosure or bug bounty program.
Experience with enterprise-scale vulnerability scanning tools and methodologies.
Ability to manage geographically distributed teams across multiple time zones and participate in on-call rotations.
Excellent written and verbal communication skills for technical and non-technical audiences.
Bachelor's degree in Computer Science, Information Security, or related field (preferred); experience with cloud-native architectures, WAF, DNS security, AI/ML in security, or relevant certifications like CISP or OSCP (preferred).