Systems & Kernel Software Engineer, Security
The SPEAR team in Apple’s Security Engineering & Architecture organization is hiring a collaborative system software engineer with a drive to improve the security of end user devices.
SPEAR is a dedicated team of software engineers that works on security hardening in the lower levels of all of Apple’s operating systems. We work with teams across Apple on targeted projects to improve the security of critical components of our operating systems. We focus on projects ranging from surgical adoptions of memory safety technologies to wholesale refactors that reorient key system components to keep our users’ devices secure. Our work results in major improvements to the security of Apple’s products without compromising the polished user experience over a billion users rely on every day.
As a Systems & Kernel Software Engineer in SPEAR, you will work with teams across the lower levels of Apple’s software stack to improve the security of our operating systems. You and your team will deliver well-designed, robust, and maintainable infrastructure and mitigations that eliminate whole classes of software vulnerabilities. Your team's accomplishments will dramatically accelerate progress o improving the security of our user’s devices. Your work will help set the standard for cross-functional collaboration, thorough testing, and clear documentation.
Through the collective efforts of talented engineers like yourself, Apple’s products are the most secure consumer devices on the market. Our mission is to continue to advance the state of the art of end user security. Our goal isn’t simply to be the most secure: we’re working to ensure the safety of every user’s digital life, even against the most malicious and well-resourced adversaries.
Each project will involve solving unique challenges while handling the following core responsibilities:
Efficiently gain familiarity with the design and implementation of existing codebases.
Contribute to design of kernel, driver, and firmware security hardening projects, including memory safety technology adoption, mitigation deployment, sandboxing/isolation, refactoring, and other approaches as necessary.
Update existing low-level software codebases or create new codebases as necessary to achieve project goals.
Implement projects using the most appropriate language, potentially including C, C++, or Swift.
Adopt or update isolated unit testing to thoroughly exercise changes; collaborate with QA engineers on functional testing.
Document changes and new architectural elements, creating training materials required for partner team to maintain changes going forward.
Communicate collaboratively and effectively during all project phases.
- Experience developing software for low-level environments such as firmware, hardware drivers, kernels, or hypervisors
- Strong interest in security and a desire to develop your skills in that area
- Deep understanding of a system programming language such as C or C++
- Understanding of how low-level software is compiled to machine code and interacts with hardware
- Ability to quickly get up to speed on new codebases and adjust your approach to meet the needs of diverse projects and requirements
- Ability to communicate clearly and effectively about technical topics (verbal and written)
- Enthusiastic, empathetic, and collaborative approach to multi-functional projects
- Bachelor of Science in Computer Science or Computer Engineering, or equivalent experience/skills
- This role requires openness to new ways of approaching low-level software to achieve stronger security. While experience in these areas is not required, this could include use of memory safe languages, safer C++ abstractions, and C memory safety extensions.
Apple is an equal opportunity employer that is committed to inclusion and diversity. We seek to promote equal opportunity for all applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, Veteran status, or other legally protected characteristics. Learn more about your EEO rights as an applicant.