Penetration Tester, Retail Engineering

In a fast-evolving digital world, our team seeks a Security Penetration Tester to take on emerging cyber threats. With us, you'll play a pivotal role in safeguarding Apple's Online Store, Apple Store App, flagship Retail locations, and vital backend customer and payment systems. You'll get to dive into groundbreaking technologies, collaborate with industry experts, and safeguard critical digital assets. Join us to turn your skills in code analysis, penetration testing, and security research into impactful results. If this sounds like a role for you, we would love to meet you!

Description

As a penetration tester, you can expect to do the following:

• Conduct manual penetration testing against web applications, APIs, cloud environments, infrastructure, mobile applications, and custom technologies.
• Communicate these findings in high-quality reports and presentations.
• Provide security advice and partnership to engineering teams and non-technical partners.
• Develop scripts and tooling to augment penetration testing activities or demonstrate proof of concepts.
• Source code review of large sophisticated applications.
• Become a domain expert for colleagues in an area of security and penetration testing, shape security requirements, technical documentation, and testing methodology. Guide others and share expertise.

Minimum Qualifications

• Passion for information security, particularly in penetration testing.
• In-depth knowledge of web application security, system, and infrastructure security.
• Expertise in a specialist security topic such as cloud security, mobile security, container security, etc.
• Ability to learn new skills, concepts, and technologies.
• Strong written and verbal communication skills, ability to communicate vulnerabilities to a variety of partners.
• Strong understanding of fundamental computing, database, networking, and security concepts.

Preferred Qualifications

• OSCP or OSWE certification (preferred).
• Experience with CTFs or hacking labs.
• Proficiency in MacOS and other Unix-based systems.
• Ability to grasp large sophisticated systems and context-switch when needed.
• Knowledge of cloud architecture and security.
• Publications, security research, bug bounties, or CVEs are highly regarded.
• Bachelor's in Computer Science or equivalent.

Additional Requirements

• At Apple, base pay is one part of our total compensation package and is determined within a range. This provides the opportunity to progress as you grow and develop within a role. The base pay range for this role is between $143,100 and $214,500, and your base pay will depend on your skills, qualifications, experience, and location.
• Apple employees also have the opportunity to become an Apple shareholder through participation in Apple’s discretionary employee stock programs. Apple employees are eligible for discretionary restricted stock unit awards and can purchase Apple stock at a discount if voluntarily participating in Apple’s Employee Stock Purchase Plan. You’ll also receive benefits including comprehensive medical and dental coverage, retirement benefits, a range of discounted products and free services, and reimbursement for certain educational expenses — including tuition. Additionally, this role might be eligible for discretionary bonuses or commission payments as well as relocation. Learn more about Apple Benefits.
• Note: Apple benefit, compensation, and employee stock programs are subject to eligibility requirements and other terms of the applicable plan or program.

Apple is an equal opportunity employer that is committed to inclusion and diversity. We take affirmative action to ensure equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant.