Software Engineer, Security

Join the Apple Cloud Object Store (ACOS) team as a Software Engineer with a focus on security. The ACOS team, which is part of Apple Services Engineering organisation, is one of the most critical infrastructure teams at Apple, storing and serving petabytes of data across Apple's services. The ASE organization builds and operates the cloud infrastructure underpinning Apple's services, bringing together compute, storage, networking, and security into a unified Apple Cloud platform. In this role you'll work at the intersection of distributed systems engineering and security — building the authentication, authorisation, and encryption foundations that protect data at exabyte scale.

The security challenges in a large-scale cloud object store are deep and varied. You will work on problems such as:

• Designing and evolving authentication systems to meet modern security standards.
• Implementing and improving encryption-at-rest schemes with robust key lifecycle management at scale.
• Building IAM policy enforcement at high throughput.
• Driving compliance for a multi-region storage platform.
• Conducting threat modeling for a system handling hundreds of thousands of requests per second.

You'll also contribute to broader storage engineering work — durability, availability, multi-tenancy, and performance — making this a well-rounded SWE role with a security-first mindset.

Responsibilities

• Join a highly collaborative team that values mutual support and security-first engineering.
• Own and contribute to security infrastructure projects across authentication, authorisation, and encryption.
• Implement and evolve authentication systems to meet modern security standards.
• Build and maintain encryption-at-rest infrastructure.
• Participate in threat modeling for new and existing features.
• Identify, scope, and lead projects that span security, reliability, isolation, scalability, and maintainability.
• Work across teams to identify improvement areas, build consensus, and participate in roadmap and security planning discussions.
• Collaborate with Apple's Security and Privacy orgs, serving as the storage org's point of contact for security matters.

Minimum Qualifications

• Solid backend software engineering experience with strong computer science fundamentals: networking, distributed systems, and security concepts.
• Good understanding of authentication and authorisation.
• Understanding of cryptographic fundamentals.
• Experience driving complex projects end-to-end and collaborating across teams.

Preferred Qualifications

• Experience with IAM systems, STS/short-lived credentials, or policy-based access control.
• Hands-on experience with encryption infrastructure.
• Familiarity with compliance frameworks such as PCI-DSS or SOX in a cloud infrastructure context.
• Experience with threat modeling methodologies or conducting security design reviews.

At Apple, we're not all the same. And that's our greatest strength. We draw on the differences in who we are, what we've experienced and how we think. Because to create products that serve everyone, we believe in including everyone. Therefore, we are committed to treating all applicants fairly and equally. As a registered Disability Confident employer, we will work with applicants to make any reasonable accommodations. Apple will consider for employment all qualified applicants with criminal backgrounds in a manner consistent with applicable law.

At Apple, we believe accessibility is a fundamental human right. You’ll find that idea reflected in everything here — in our culture, our benefits and our digital tools. By welcoming as many perspectives as possible, we help you build a career where you feel like you belong.