Kernel Security Engineer

Prague, Bohemia, Czechia
Software and Services


Posted: 20 Aug 2019
Weekly Hours: 40
Role Number: 200091247
The Core Kernel team within Apple's CoreOS organization is responsible for delivery of a high-quality and performant kernel into just about every one of Apple’s products. Our software runs on your wrist as part of watchOS; in your pocket with iOS; on your desk in macOS; in your living room with tvOS; on the devices owned by your friends and family; and hundreds of millions of devices beyond those. This position requires a rock solid understanding of operating systems fundamentals, experience in kernel design and implementation, and a passion for security engineering. We deal in all of the traditional kernel subsystems, e.g. virtual memory, scheduling, IPC, etc, and also serve as expert system sleuths up and down the entire Apple stack. Our company is one of the last vertically integrated systems shops remaining, and as such our engineers have the rare opportunity to roam the system freely, from iOS silicon design all the way up to Apps and the cloud. As a security engineer in the Core Kernel team, you will have the opportunity to work with many different kernel subsystems and collaborate with a variety of partner teams.

Key Qualifications

  • A real passion for operating system technology
  • In-depth understanding of past, current, and emerging kernel exploits
  • Intimate familiarity with a range of vulnerability patterns and defensive best-practices
  • Background in secure coding best practices and code auditing
  • Design and implementation responsibility for a major project
  • Demonstrated creative and critical thinking capabilities and troubleshooting skills
  • In-depth knowledge of kernel internals
  • Familiarity with modern processor and SoC architectures
  • Highly professional, with the ability to multitask and deliver solid work on tight schedules


• Work with a highly skilled engineering team in the design, implementation and support of kernel technologies. • Develop fuzzers and other automated tools for vulnerability finding. • Provide security design consulting within the kernel team as well as with colleagues on partner teams. • Help define the security roadmap for the xnu kernel and adjacent layers. • Drive the design and implementation of kernel security features. • Coordinate with partner security organizations and respond to reactive security exercises, large and small. • Develop new hardening and analysis techniques, and dedicatedly apply them to the kernel and other system components. • Collaborate with Apple's silicon teams on the design, development, validation, and software adoption of new security-related hardware features. • Act as primary liaison with various internal and external security teams.

Education & Experience

A degree in Computer Science or equivalent experience and skills

Additional Requirements