DevOps Software Engineer - Fuzzing Infrastructure

Summary

As part of Apple's Security Engineering & Architecture (SEAR) organization, you'll join our mission to create the world's most secure products. We build groundbreaking tools that empower our security researchers to deeply analyze Apple's codebases and frameworks and surface security concerns efficiently and at scale. Fuzzing is one of the most effective ways we find vulnerabilities before attackers do. We are building the next generation of our fuzzing infrastructure, and we are seeking a DevOps Software Engineer to help develop it, deploy it, and keep it running reliably for the teams that depend on it. By combining infrastructure and software development, you will directly contribute to our mission to create the world's most secure products.

Minimum Qualifications

Experience designing and operating cloud and on-premises service infrastructure, with advanced knowledge of containerization, Kubernetes, CI/CD, data storage, networking, authentication/authorization (OIDC, OAuth), queuing, logging, and monitoring. Advanced knowledge of scripting and programming languages, including Python and Bash. Familiarity with fuzzing concepts and tooling (e.g., AFL++, libFuzzer, coverage-guided fuzzing, sanitizers, crash triage and deduplication) Self-starter with strong ownership, accountability, and the ability to work autonomously and collaboratively across teams and organizations in a fast-paced environment.

Preferred Qualifications

Experience building or operating security research tooling, or large-scale batch/distributed compute systems Experience with and/or strong enthusiasm for security, especially offensive security Experience with large-scale data pipelines and storage systems (corpora, crash artifacts, coverage data) Familiarity with AI/ML workflows and agents

Description

A strong candidate for this role is passionate about building reliable, secure, and scalable infrastructure that directly amplifies security research impact. You will work closely with security researchers and fuzzing engineers, located worldwide, on a new fuzzing platform that runs large fleets of fuzzing jobs across heterogeneous targets, from userland libraries to full-system and device fuzzing. You will take part in the complete journey: from architecture and implementation of the platform's core services, through build and deployment, to ongoing reliable operation. You will help migrate existing fuzzing campaigns onto the new platform and make it simple for researchers to onboard new targets. On the development side, you will contribute to the platform's services, APIs, and integrations, and harden research code for scale. On the infrastructure side, you will design containerized deployments, establish CI/CD pipelines, implement secrets management and access controls, and build the monitoring and observability that tell us whether campaigns are actually making progress (coverage, throughput, crash rates, worker health).

Responsibilities

* Develop and maintain the components of the fuzzing infrastructure: job scheduling, worker orchestration, corpus and crash storage, result aggregation and triage pipelines. * Build and operate CI/CD for the platform itself and for the fuzzing targets that run on it (reproducible builds, artifact versioning, safe rollouts and rollbacks). * Secure the platform. Fuzzing runs untrusted, crashing, and potentially malicious inputs, so isolation, network egress control, authentication, and auditability matter. * Define and monitor the metrics that show campaign health, and detect stalled or degraded fuzzers early. * Support researchers: gather requirements, onboard targets, and communicate progress and impact to engineers, managers, and leaders across the organization. * Challenge our design choices and help keep the platform maintainable as it grows. You will bring equal rigor to code quality, security posture, and operational excellence, balancing all three to maximize SEAR's ability to proactively secure Apple products at scale.