Systems & Kernel Software Engineer - Sear

Summary

The SPEAR Systems & Kernel team in Apple's Security Engineering & Architecture organization is hiring a collaborative systems engineer with a drive to improve the security of end user devices. We take on software engineering projects to make progress on Apple's most pressing security challenges, anywhere in the lower layers of the stack: bootloaders, drivers, firmware, and the kernel. Our goal is to eliminate whole classes of software vulnerabilities, securing our systems against even the most advanced and well-resourced adversaries. We've done wholesale rewrites of codebases into memory safe languages, deployed static and dynamic analysis to prevent bugs, and undertaken bespoke rearchitecture of critical codebases. We continue to refine our approach to best protect our users against rapidly evolving threats.

Minimum Qualifications

BS in Computer Science or a related field, or equivalent experience. Working knowledge of C and expertise in one or more systems programming languages (C, C++, Rust, Zig, or Swift). Experience writing low-level software, such as kernels, drivers, firmware, bootloaders, hypervisors, or runtimes. Understanding of how low-level code is compiled to machine code and interacts with hardware. Experience with, or an interest in, software security. Strong written and verbal communication.

Preferred Qualifications

Understanding of the security properties of common systems languages. Understanding of common vulnerability exploitation and mitigation techniques. Experience designing, implementing, or evaluating software security mitigations. Deep expertise in C programming. Experience using LLMs to accelerate security engineering. Experience with compiler security features, static analysis, or fuzzing. Contributions to open-source systems or security projects.

Description

As a Systems & Kernel Software Engineer in SPEAR, you will partner with teams across the lower layers of the software stack to design security defenses that meaningfully improve the security of Apple devices. Working in a small team of SPEAR engineers, you will collaborate on a design that upholds a high security standard without compromising on system performance or user experience. Then, you will go hands-on. You and your team will ramp up on the partner team's codebase and implement the design. A day on the job might involve: - Designing the hardening approach for a given codebase, from surgical adoptions of memory safety technologies, to mitigation deployment, to broad refactors that reorient key system components. - Ramping quickly on unfamiliar codebases and writing production-quality low-level code in C, C++, or Swift. - Balancing security goals against the realities of working on code that ships to hundreds of millions of devices: performance, memory footprint, compatibility, and reliability. - Testing thoroughly, debugging carefully, and partnering with QA on end-to-end validation. - Using modern tooling, including LLMs, where it helps us move faster, while applying the systems and security depth needed to evaluate what those tools produce. - Creating the documentation and training materials the partner team needs to maintain and build on the changes.