Security Engineer - Developer Experience

Summary

The Apple Services Engineering Security team builds and provides secure systems and infrastructure that fuel Apple's services, including iCloud, Music, Siri, and the App Store. As part of the ASE Security team, you will help manage the security needs of Apple’s services around the world. We're looking for a Developer Experience Security Engineer to help engineers across Apple build secure software with confidence, closing the gap between security guidance and engineering practice by crafting the documentation, automation, and learning resources that make secure development intuitive, accessible, and frictionless at scale.

Minimum Qualifications

7+ years of experience in a software engineering, developer experience, or technical writing role with an understanding of software build, deploy, and monitoring principles, including software supply chain engineering and SDLC practices Demonstrated ability to write production-quality automation, including Slack workflows and integrations, and tooling for issue and ticket lifecycle management Familiarity with LLM-assisted development tools and experience writing prompt instructions, skills files, or system prompts that shape model behavior for specific domains Proven ability to distill complex technical topics into clear, precise writing and reference documentation for engineering audiences, including FAQs, how-to guides, and onboarding materials Proven ability to work cross-functionally, designing and executing campaigns partnering with engineering teams across diverse organizations to drive behavior Self-directed and comfortable making prioritization decisions, and managing multiple workstreams simultaneously Collaborative team player with strong listening skills, empathy, and a commitment to bringing out the best in peers

Preferred Qualifications

Bachelor's degree in Computer Science, Information Security, or a related technical field, or equivalent work experience Familiarity with application security principles, secure coding practices, software supply chain security, or developer-facing security tooling A portfolio or examples of technical documentation, automation scripts, or LLM skills files is welcome

Description

As a Developer Experience Security Engineer on the Services Engineering Security team, you will own the creation and maintenance of the resources that application, infrastructure, and platform engineers depend on to build securely. This is a highly collaborative cross-functional role that blends software development, technical writing, and strategic communication to drive measurable adoption of security practices across Apple's engineering community. You will be the connective tissue between security standards and the engineers who implement them across the software development lifecycle; translating complex technical requirements into clear, actionable guidance and helping teams adopt new practices, onboard to tooling, integrate security frameworks, and stay aligned as standards evolve.

Responsibilities

Author and maintain a library of security guidance — FAQs, skills libraries, decision guides, and onboarding documentation spanning the full SDLC — establishing standards that keep content accurate, discoverable, and aligned with evolving engineering practices Identify and close documentation gaps by analyzing inbound questions, support trends, and user requests, routing insights back into living documentation and feature requests Design and build Slack-based automation to surface security guidance, route questions to appropriate resources, and reduce repetitive support burden Author skills files and system-level instructions for LLM-assisted development tools, encoding security best practices — including software supply chain security and secure SDLC practices — and extend this capability to writing, communications, and outreach to produce consistent, high-quality content at scale Plan and execute targeted internal communications campaigns that drive awareness and adoption of security practices, tooling, and policy changes — adapting tone, format, and channel for different engineering audiences to maximize engagement Partner with engineering leads and program managers to coordinate rollout communications for new security requirements, and use data and feedback to continuously refine messaging and content strategy