Sr. Security Incident Response Engineer - SIRT

Seattle, Washington, United States
Corporate Functions


Weekly Hours: 40
Role Number:200156590
This position can be located in Austin (TX), Seattle (WA), Santa Clara Valley (CA), or San Francisco (CA) Apple is seeking an exceptional Senior Security Incident Response Engineer to join a world-class security incident response team. Imagine what you could do here. At Apple, new ideas have a way of becoming extraordinary products, services, and customer experiences very quickly. Bring passion and dedication to your job and there's no telling what you could accomplish. We’re a diverse collection of thinkers and doers, continually reimagining our products, systems, and practices to help people do what they love in new ways. This is a deeply reciprocal place, where everything we build is the result of people in different roles and teams working together to make each other’s ideas stronger. That same real passion for innovation that goes into our products also applies to our practices, strengthening our dedication to leave the world better than we found it.

Key Qualifications

  • 5-10 years of experience in Information Security with a focus on incident response, security engineering, and/or intrusion detection
  • Proficient understanding of incident response and response automation strategies
  • Proficient understanding of threat modeling, operational threat intelligence, and common attack vectors
  • Proficient understanding of system and network hardening practices
  • Strong collaboration skills and an ability to lead cross-functional teams
  • Experience communicating complex security issues to senior leadership
  • Exceptional analytical and investigative abilities with hands-on experience leading root cause analysis
  • Expert level knowledge of macOS, Linux, and Windows Operating Systems
  • Solid knowledge of computer networks and common protocols
  • Must have demonstrated experience analyzing network traffic and endpoint artifacts
  • Demonstrated ability to analyze endpoint, network, and application logs
  • Demonstrated understanding of cloud security and incident response


This is a hands-on role in a dynamic and fast paced environment. In this role you lead the response to security threats facing the company and will help further develop the incident response program responsible for protecting Apple. An ideal candidate is highly motivated, has experience leading multi-functional teams, and embraces the opportunity to evangelize security across the organization.

Education & Experience

B.S. in Computer Science, Engineering, equivalent degree, or relevant work experience

Additional Requirements

  • - Experience with disk and memory forensic tools
  • - Experience writing and tuning IDS signatures
  • - Experience with enterprise log collection and analysis platforms
  • - Experience triaging malware